Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 5,433
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache1527 nginx174 Drupal150 Express131 Laravel130 Django122 React108 Vue.js96 Symfony89 Spring82 Joomla81 Angular44 Flask42 Ruby on Rails42 Next.js34 Magento75 phpMyFAQ38 Strapi8 TYPO35 Shopware3

🛡 Vulnerabilities tagged with this 5,473

Image ID Title
CVE-2026-100153 Cross-Site Scripting (XSS) in NewStatPress (WordPress plugin) (CVE-2026-100153)
CVE-2026-100185 Cross-Site Scripting (XSS) in WordPress (CVE-2026-100185)
CVE-2026-100193 Cross-Site Scripting (XSS) in Tutor LMS – eLearning and online course solution (WordPress plugin) (CVE-2026-100193)
CVE-2026-97668 SQL Injection in Abandoned Cart Pro for WooCommerce (WordPress plugin) (CVE-2026-97668)
CVE-2026-97657 Vulnerability in Abandoned Cart Pro for WooCommerce (WordPress plugin) (CVE-2026-97657)
CVE-2026-103422 Cross-Site Scripting (XSS) in AnyComment (WordPress plugin) (CVE-2026-103422)
CVE-2026-102251 SQL Injection in Abandoned Cart Pro for WooCommerce (WordPress plugin) (CVE-2026-102251)
CVE-2026-110002 Unrestricted File Upload in Snazzy Social Media Feed (WordPress plugin) (CVE-2026-110002)
CVE-2026-93388 Unrestricted File Upload in WordPress (CVE-2026-93388)
CVE-2026-92097 Code Injection in Click to Chat for WhatsApp (WordPress plugin) (CVE-2026-92097)
CVE-2026-17092 Vulnerability in WordPress (CVE-2026-17092)
CVE-2026-107652 Vulnerability in Database Addon for Contact Form 7 – CFDB7 (WordPress plugin) (CVE-2026-107652)
CVE-2026-104749 Privilege Escalation in WordPress (CVE-2026-104749)
CVE-2026-104767 Privilege Escalation in Membership & User Roles for WooCommerce (WordPress plugin) (CVE-2026-104767)
CVE-2026-104995 Vulnerability in BP Profile Search (WordPress plugin) (CVE-2026-104995)
CVE-2026-103425 Cross-Site Scripting (XSS) in Booking Package (WordPress plugin) (CVE-2026-103425)
CVE-2026-103423 Vulnerability in Booking Package (WordPress plugin) (CVE-2026-103423)
CVE-2026-109898 Vulnerability in WP Event Solution (CVE-2026-109898)
CVE-2026-108487 Cross-Site Scripting (XSS) in Books Gallery (CVE-2026-108487)
CVE-2026-108496 Vulnerability in WP User Manager (CVE-2026-108496)
CVE-2026-89097 Information Disclosure in Ad Inserter – Ad Manager & AdSense Ads (WordPress plugin) (CVE-2026-89097)
CVE-2026-15399 SQL Injection in Animated Number Counters (WordPress plugin) (CVE-2026-15399)
CVE-2026-109703 Vulnerability in WPGraphQL (CVE-2026-109703)
CVE-2026-102562 Cross-Site Scripting (XSS) in AcyMailing (WordPress plugin) (CVE-2026-102562)
CVE-2026-102007 Cross-Site Scripting (XSS) in WordPress (CVE-2026-102007)
CVE-2026-89269 Cross-Site Scripting (XSS) in WP Testimonials (WordPress plugin) (CVE-2026-89269)
CVE-2026-89271 Unrestricted File Upload in WP-BusinessDirectory (WordPress plugin) (CVE-2026-89271)
CVE-2026-61994 Vulnerability in WP-Members (CVE-2026-61994)
CVE-2026-108481 Cross-Site Request Forgery (CSRF) in Patreon WordPress (CVE-2026-108481)
CVE-2026-108479 Cross-Site Request Forgery (CSRF) in Patreon WordPress (CVE-2026-108479)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details