Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 5,433
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache1527 nginx174 Drupal150 Express131 Laravel130 Django122 React108 Vue.js96 Symfony89 Spring82 Joomla81 Angular44 Flask42 Ruby on Rails42 Next.js34 Magento75 phpMyFAQ38 Strapi8 TYPO35 Shopware3

🛡 Vulnerabilities tagged with this 5,473

Image ID Title
CVE-2026-111110 Cross-Site Scripting (XSS) in WordPress (CVE-2026-111110)
CVE-2026-110253 Path Traversal in WordPress (CVE-2026-110253)
CVE-2026-109983 Cross-Site Scripting (XSS) in YMC Filter (WordPress plugin) (CVE-2026-109983)
CVE-2026-100316 Cross-Site Scripting (XSS) in European VAT Compliance Assistant for WooCommerce (WordPress plugin) (CVE-2026-100316)
CVE-2026-110384 Cross-Site Scripting (XSS) in Fancy Comments WordPress (CVE-2026-110384)
CVE-2026-92431 Vulnerability in Patreon (WordPress plugin) (CVE-2026-92431)
CVE-2026-97314 Vulnerability in ThirstyAffiliates (WordPress plugin) (CVE-2026-97314)
CVE-2026-92433 Vulnerability in Patreon (WordPress plugin) (CVE-2026-92433)
CVE-2026-92432 Vulnerability in Patreon (WordPress plugin) (CVE-2026-92432)
CVE-2026-81344 Vulnerability in ACF Frontend Admin by DynamiApps (WordPress plugin) (CVE-2026-81344)
CVE-2026-104246 Vulnerability in Contact Form 7 Signature Addon (WordPress plugin) (CVE-2026-104246)
CVE-2026-104122 Vulnerability in Ukr-To-Lat (WordPress plugin) (CVE-2026-104122)
CVE-2026-106470 Vulnerability in WP Data Access (WordPress plugin) (CVE-2026-106470)
CVE-2026-81343 Vulnerability in ACF Frontend Admin by DynamiApps (WordPress plugin) (CVE-2026-81343)
CVE-2026-91074 Vulnerability in BSK PDF Manager (WordPress plugin) (CVE-2026-91074)
CVE-2026-103376 Vulnerability in WordPress (CVE-2026-103376)
CVE-2026-110527 Vulnerability in WP User Manager (WordPress plugin) (CVE-2026-110527)
CVE-2026-92978 Cross-Site Request Forgery (CSRF) in WordPress (CVE-2026-92978)
CVE-2026-96660 Cross-Site Scripting (XSS) in WordPress (CVE-2026-96660)
CVE-2026-92715 Vulnerability in Tutor LMS – eLearning and online course solution (WordPress plugin) (CVE-2026-92715)
CVE-2026-92798 Code Injection in WordPress (CVE-2026-92798)
CVE-2026-110268 Path Traversal in WordPress (CVE-2026-110268)
CVE-2026-111726 Cross-Site Scripting (XSS) in Themify Builder (WordPress plugin) (CVE-2026-111726)
CVE-2026-109368 Vulnerability in WP Booking System – Booking Calendar (WordPress plugin) (CVE-2026-109368)
CVE-2026-109985 Cross-Site Scripting (XSS) in WordPress (CVE-2026-109985)
CVE-2026-109369 Vulnerability in WP Booking System – Booking Calendar (WordPress plugin) (CVE-2026-109369)
CVE-2026-109989 Cross-Site Scripting (XSS) in Themify Popup (WordPress plugin) (CVE-2026-109989)
CVE-2026-108123 Vulnerability in WP Booking System – Booking Calendar (WordPress plugin) (CVE-2026-108123)
CVE-2026-107744 Vulnerability in WordPress (CVE-2026-107744)
CVE-2026-107752 SQL Injection in Welcart e-Commerce (WordPress plugin) (CVE-2026-107752)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details