Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 5,473
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache1534 nginx174 Drupal150 Express132 Laravel130 Django122 React108 Vue.js96 Symfony89 Spring82 Joomla81 Angular44 Flask42 Ruby on Rails42 Next.js34 Magento75 phpMyFAQ38 Strapi8 TYPO35 Shopware3

🛡 Vulnerabilities tagged with this 5,486

Image ID Title
CVE-2025-14159 Cross-Site Request Forgery (CSRF) in Secure Copy Content Protection and Content Locking (WordPress plugin) (CVE-2025-14159)
CVE-2025-14442 Vulnerability in Secure Copy Content Protection and Content Locking (WordPress plugin) (CVE-2025-14442)
CVE-2025-12408 Information Disclosure in Events Manager – Calendar, Bookings, Tickets, and more! (WordPress plugin) (CVE-2025-12408)
CVE-2025-12965 Cross-Site Scripting (XSS) in Magical Posts Display (WordPress plugin) (CVE-2025-12965)
CVE-2025-14030 Cross-Site Scripting (XSS) in AI Feeds (WordPress plugin) (CVE-2025-14030)
CVE-2025-12407 Cross-Site Request Forgery (CSRF) in Events Manager – Calendar, Bookings, Tickets, and more! (WordPress plugin) (CVE-2025-12407)
CVE-2025-12841 Vulnerability in Bookit (WordPress plugin) (CVE-2025-12841)
CVE-2025-12835 Vulnerability in WooMulti (WordPress plugin) (CVE-2025-12835)
CVE-2025-12348 Vulnerability in WordPress (CVE-2025-12348)
CVE-2025-13993 Cross-Site Scripting (XSS) in MailerLite – Signup forms (WordPress plugin) (CVE-2025-13993)
CVE-2025-14074 Vulnerability in WordPress (CVE-2025-14074)
CVE-2025-12960 Path Traversal in Simple CSV Table (WordPress plugin) (CVE-2025-12960)
CVE-2025-4970 Cross-Site Scripting (XSS) in BSK PDF Manager (WordPress plugin) (CVE-2025-4970)
CVE-2025-13891 Path Traversal in Image Gallery – Photo Grid & Video Gallery (WordPress plugin) (CVE-2025-13891)
CVE-2025-10583 Vulnerability in WP Fastest Cache Premium (WordPress plugin) (CVE-2025-10583)
CVE-2025-11876 Cross-Site Scripting (XSS) in Mailgun Subscriptions (WordPress plugin) (CVE-2025-11876)
CVE-2025-14049 Cross-Site Scripting (XSS) in VikRentItems Flexible Rental Management System (WordPress plugin) (CVE-2025-14049)
CVE-2025-14169 SQL Injection in FunnelKit - Funnel Builder for WooCommerce Checkout (WordPress plugin) (CVE-2025-14169)
CVE-2025-12655 Vulnerability in Hippoo Mobile App for WooCommerce (WordPress plugin) (CVE-2025-12655)
CVE-2025-13660 Information Disclosure in Guest Support (WordPress plugin) (CVE-2025-13660)
CVE-2025-14068 SQL Injection in WPNakama (WordPress plugin) (CVE-2025-14068)
CVE-2025-14356 Vulnerability in Ultra Addons for Contact Form (WordPress plugin) (CVE-2025-14356)
CVE-2025-12570 Cross-Site Scripting (XSS) in Fancy Product Designer (WordPress plugin) (CVE-2025-12570)
CVE-2025-10684 Authentication Bypass in Construction Light (WordPress theme) (CVE-2025-10684)
CVE-2025-14392 Vulnerability in Simple Theme Changer (WordPress plugin) (CVE-2025-14392)
CVE-2025-14393 Cross-Site Scripting (XSS) in Wpik WordPress Basic Ajax Form (WordPress plugin) (CVE-2025-14393)
CVE-2025-14467 Cross-Site Scripting (XSS) in WP Job Portal (WordPress plugin) (CVE-2025-14467)
CVE-2025-14170 Vulnerability in Vimeo SimpleGallery (WordPress plugin) (CVE-2025-14170)
CVE-2025-14165 Cross-Site Request Forgery (CSRF) in Kirim.Email WooCommerce Integration (WordPress plugin) (CVE-2025-14165)
CVE-2025-14166 Code Injection in WPMasterToolKit (WordPress plugin) (CVE-2025-14166)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details