Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 5,473
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache1534 nginx174 Drupal150 Express132 Laravel130 Django122 React108 Vue.js96 Symfony89 Spring82 Joomla81 Angular44 Flask42 Ruby on Rails42 Next.js34 Magento75 phpMyFAQ38 Strapi8 TYPO35 Shopware3

🛡 Vulnerabilities tagged with this 5,473

Image ID Title
CVE-2025-13377 Path Traversal in WordPress 10Web (CVE-2025-13377)
CVE-2025-13896 Cross-Site Scripting (XSS) in Social Feed Gallery Portfolio (WordPress plugin) (CVE-2025-13896)
CVE-2025-13898 Cross-Site Scripting (XSS) in Ultra Skype Button (WordPress plugin) (CVE-2025-13898)
CVE-2025-13899 Cross-Site Scripting (XSS) in TR Timthumb (WordPress plugin) (CVE-2025-13899)
CVE-2025-13907 Cross-Site Scripting (XSS) in CSS3 Buttons (WordPress plugin) (CVE-2025-13907)
CVE-2025-13656 Cross-Site Scripting (XSS) in Cute News Ticker (WordPress plugin) (CVE-2025-13656)
CVE-2025-13666 Vulnerability in Helloprint (WordPress plugin) (CVE-2025-13666)
CVE-2025-13856 Cross-Site Scripting (XSS) in Extra Post Images (WordPress plugin) (CVE-2025-13856)
CVE-2025-13857 Cross-Site Scripting (XSS) in Yet Another WebClap for (WordPress plugin) (CVE-2025-13857)
CVE-2025-13863 Cross-Site Scripting (XSS) in RevInsite (WordPress plugin) (CVE-2025-13863)
CVE-2025-13894 Cross-Site Scripting (XSS) in CSV Sumotto (WordPress plugin) (CVE-2025-13894)
CVE-2025-13137 Cross-Site Scripting (XSS) in Live Sales Notification for Woocommerce – Woomotiv (WordPress plugin) (CVE-2025-13137)
CVE-2025-13308 Cross-Site Scripting (XSS) in Application Passwords (WordPress plugin) (CVE-2025-13308)
CVE-2025-13309 Vulnerability in WordPress (CVE-2025-13309)
CVE-2025-13358 Vulnerability in Accessiy By CodeConfig Accessibility (WordPress plugin) (CVE-2025-13358)
CVE-2025-13626 Cross-Site Scripting (XSS) in myLCO (WordPress plugin) (CVE-2025-13626)
CVE-2025-13629 Cross-Site Request Forgery (CSRF) in WP Landing Page (WordPress plugin) (CVE-2025-13629)
CVE-2025-12577 Vulnerability in Listar – Directory Listing & Classifieds WordPress Plugin (WordPress plugin) (CVE-2025-12577)
CVE-2025-12673 Unrestricted File Upload in Flex QR Code Generator (WordPress plugin) (CVE-2025-12673)
CVE-2025-12715 Cross-Site Scripting (XSS) in Canadian Nutrition Facts Label (WordPress plugin) (CVE-2025-12715)
CVE-2025-12717 Cross-Site Scripting (XSS) in List Attachments Shortcode (WordPress plugin) (CVE-2025-12717)
CVE-2025-12720 Vulnerability in g-FFL Cockpit (WordPress plugin) (CVE-2025-12720)
CVE-2025-12721 Vulnerability in g-FFL Cockpit (WordPress plugin) (CVE-2025-12721)
CVE-2025-12574 Vulnerability in Listar – Directory Listing & Classifieds WordPress Plugin (WordPress plugin) (CVE-2025-12574)
CVE-2025-12091 Vulnerability in Search, Filters & Merchandising for WooCommerce (WordPress plugin) (CVE-2025-12091)
CVE-2025-13922 SQL Injection in WordPress (CVE-2025-13922)
CVE-2025-12505 Vulnerability in weDocs (WordPress plugin) (CVE-2025-12505)
CVE-2025-12510 Cross-Site Scripting (XSS) in Widgets for Google Reviews (WordPress plugin) (CVE-2025-12510)
CVE-2025-11263 Cross-Site Scripting (XSS) in Link Whisper Free (WordPress plugin) (CVE-2025-11263)
CVE-2025-13678 Cross-Site Scripting (XSS) in Thai Lottery Widget (WordPress plugin) (CVE-2025-13678)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details