Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 5,473
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache1534 nginx174 Drupal150 Express132 Laravel130 Django122 React108 Vue.js96 Symfony89 Spring82 Joomla81 Angular44 Flask42 Ruby on Rails42 Next.js34 Magento75 phpMyFAQ38 Strapi8 TYPO35 Shopware3

🛡 Vulnerabilities tagged with this 5,486

Image ID Title
CVE-2025-14344 Path Traversal in Multi Uploader for Gravity Forms (WordPress plugin) (CVE-2025-14344)
CVE-2025-14354 Cross-Site Request Forgery (CSRF) in Resource Library for Logged In Users (WordPress plugin) (CVE-2025-14354)
CVE-2025-14391 Cross-Site Request Forgery (CSRF) in Simple Theme Changer (WordPress plugin) (CVE-2025-14391)
CVE-2025-14138 Cross-Site Scripting (XSS) in WPLG Default Mail From (WordPress plugin) (CVE-2025-14138)
CVE-2025-14143 Cross-Site Scripting (XSS) in Ayo Shortcodes (WordPress plugin) (CVE-2025-14143)
CVE-2025-14158 Cross-Site Request Forgery (CSRF) in Coding Blocks (WordPress plugin) (CVE-2025-14158)
CVE-2025-14160 Cross-Site Request Forgery (CSRF) in Upcoming for Calendly (WordPress plugin) (CVE-2025-14160)
CVE-2025-14161 Cross-Site Request Forgery (CSRF) in Truefy Embed (WordPress plugin) (CVE-2025-14161)
CVE-2025-14162 Cross-Site Request Forgery (CSRF) in WordPress (CVE-2025-14162)
CVE-2025-14137 Cross-Site Scripting (XSS) in Simple AL Slider (WordPress plugin) (CVE-2025-14137)
CVE-2025-14064 Vulnerability in BuddyTask (WordPress plugin) (CVE-2025-14064)
CVE-2025-14119 Cross-Site Scripting (XSS) in WordPress (CVE-2025-14119)
CVE-2025-14125 Cross-Site Scripting (XSS) in Complag (WordPress plugin) (CVE-2025-14125)
CVE-2025-14129 Cross-Site Scripting (XSS) in Like DisLike Voting (WordPress plugin) (CVE-2025-14129)
CVE-2025-14132 Cross-Site Scripting (XSS) in Category Dropdown List (WordPress plugin) (CVE-2025-14132)
CVE-2025-14035 Cross-Site Scripting (XSS) in DebateMaster (WordPress plugin) (CVE-2025-14035)
CVE-2025-14032 Cross-Site Scripting (XSS) in Bold Timeline Lite (WordPress plugin) (CVE-2025-14032)
CVE-2025-14044 Unsafe Deserialization in Visitor Logic Lite (WordPress plugin) (CVE-2025-14044)
CVE-2025-14045 Vulnerability in URL Media Uploader (WordPress plugin) (CVE-2025-14045)
CVE-2025-14048 Cross-Site Scripting (XSS) in SimplyConvert (WordPress plugin) (CVE-2025-14048)
CVE-2025-14062 Cross-Site Request Forgery (CSRF) in Animated Pixel Marquee Creator (WordPress plugin) (CVE-2025-14062)
CVE-2025-13971 Cross-Site Scripting (XSS) in TWW Protein Calculator (WordPress plugin) (CVE-2025-13971)
CVE-2025-13975 Cross-Site Scripting (XSS) in WordPress (CVE-2025-13975)
CVE-2025-13987 Cross-Site Request Forgery (CSRF) in Purchase and Expense Manager (WordPress plugin) (CVE-2025-13987)
CVE-2025-13988 Cross-Site Scripting (XSS) in 评论小秘书 (WordPress plugin) (CVE-2025-13988)
CVE-2025-13989 Cross-Site Scripting (XSS) in WP Dropzone (WordPress plugin) (CVE-2025-13989)
CVE-2025-13972 Path Traversal in WatchTowerHQ (WordPress plugin) (CVE-2025-13972)
CVE-2025-13961 Cross-Site Scripting (XSS) in Data Visualizer (WordPress plugin) (CVE-2025-13961)
CVE-2025-13962 Cross-Site Scripting (XSS) in Divelogs Widget (WordPress plugin) (CVE-2025-13962)
CVE-2025-13963 Cross-Site Scripting (XSS) in FX Currency Converter (WordPress plugin) (CVE-2025-13963)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details