Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 5,473
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache1534 nginx174 Drupal150 Express132 Laravel130 Django122 React108 Vue.js96 Symfony89 Spring82 Joomla81 Angular44 Flask42 Ruby on Rails42 Next.js34 Magento75 phpMyFAQ38 Strapi8 TYPO35 Shopware3

🛡 Vulnerabilities tagged with this 5,473

Image ID Title
CVE-2025-67578 Vulnerability in WP Email Capture (CVE-2025-67578)
CVE-2025-67579 Vulnerability in WordPress (CVE-2025-67579)
CVE-2025-67557 Cross-Site Scripting (XSS) in WordPress WP eBay Product Feeds (CVE-2025-67557)
CVE-2025-67559 Vulnerability in WordPress Vcita (CVE-2025-67559)
CVE-2025-67541 Cross-Site Scripting (XSS) in WP-ShowHide (CVE-2025-67541)
CVE-2025-67542 Cross-Site Scripting (XSS) in Multi-Step Checkout for WooCommerce (CVE-2025-67542)
CVE-2025-67535 Unsafe Deserialization in WordPress WP Maps (CVE-2025-67535)
CVE-2025-67516 SQL Injection in Store Locator WordPress (CVE-2025-67516)
CVE-2025-67472 Cross-Site Request Forgery (CSRF) in WordPress Vcita (CVE-2025-67472)
CVE-2025-63057 Cross-Site Scripting (XSS) in Wp Ultimate Review (CVE-2025-63057)
CVE-2025-63063 Vulnerability in Yandex.Metrica (CVE-2025-63063)
CVE-2025-63009 Vulnerability in WP Google Analytics Events (CVE-2025-63009)
CVE-2025-63012 Cross-Site Request Forgery (CSRF) in WP Hotel Booking (CVE-2025-63012)
CVE-2025-63013 Vulnerability in WP Hotel Booking (CVE-2025-63013)
CVE-2025-63011 Cross-Site Scripting (XSS) in WP Hotel Booking (CVE-2025-63011)
CVE-2025-62997 Vulnerability in WP EasyCart (CVE-2025-62997)
CVE-2025-62873 Cross-Site Request Forgery (CSRF) in WP Flashy Marketing Automation (CVE-2025-62873)
CVE-2025-62740 Vulnerability in WP-CRM System (CVE-2025-62740)
CVE-2025-49347 Cross-Site Request Forgery (CSRF) in WP sIFR (CVE-2025-49347)
CVE-2025-13070 Path Traversal in CSV to SortTable (WordPress plugin) (CVE-2025-13070)
CVE-2025-13071 Cross-Site Scripting (XSS) in Custom Admin Menu (WordPress plugin) (CVE-2025-13071)
CVE-2025-13642 Code Injection in WordPress (CVE-2025-13642)
CVE-2025-13604 Cross-Site Scripting (XSS) in Login Security, FireWall, Malware removal by CleanTalk (WordPress plugin) (CVE-2025-13604)
CVE-2025-12705 Cross-Site Scripting (XSS) in Social Reviews & Recommendations (WordPress plugin) (CVE-2025-12705)
CVE-2025-12558 Information Disclosure in Beaver Builder – WordPress Page Builder (WordPress plugin) (CVE-2025-12558)
CVE-2025-13031 Vulnerability in WPeMatico RSS Feed Fetcher (WordPress plugin) (CVE-2025-13031)
CVE-2025-13065 Unrestricted File Upload in Starter Templates (WordPress plugin) (CVE-2025-13065)
CVE-2025-12966 Unrestricted File Upload in All-in-One Video Gallery (WordPress plugin) (CVE-2025-12966)
CVE-2025-12499 Cross-Site Scripting (XSS) in Rich Shortcodes for Google Reviews (WordPress plugin) (CVE-2025-12499)
CVE-2025-13748 Vulnerability in WordPress (CVE-2025-13748)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details