Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 5,473
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache1534 nginx174 Drupal150 Express132 Laravel130 Django122 React108 Vue.js96 Symfony89 Spring82 Joomla81 Angular44 Flask42 Ruby on Rails42 Next.js34 Magento75 phpMyFAQ38 Strapi8 TYPO35 Shopware3

🛡 Vulnerabilities tagged with this 5,473

Image ID Title
CVE-2025-13682 Cross-Site Scripting (XSS) in Trail Manager (WordPress plugin) (CVE-2025-13682)
CVE-2025-13739 Cross-Site Scripting (XSS) in CryptX (WordPress plugin) (CVE-2025-13739)
CVE-2025-12876 Vulnerability in Projectopia – WordPress Project Management (WordPress plugin) (CVE-2025-12876)
CVE-2025-12879 Cross-Site Request Forgery (CSRF) in WordPress (CVE-2025-12879)
CVE-2025-13614 Cross-Site Scripting (XSS) in Cool Tag Cloud (WordPress plugin) (CVE-2025-13614)
CVE-2025-12851 Vulnerability in My auctions allegro (WordPress plugin) (CVE-2025-12851)
CVE-2025-12163 Cross-Site Scripting (XSS) in Omnipress (WordPress plugin) (CVE-2025-12163)
CVE-2025-12165 Vulnerability in Webcake – Landing Page Builder (WordPress plugin) (CVE-2025-12165)
CVE-2025-10055 Cross-Site Request Forgery (CSRF) in Time Sheets (WordPress plugin) (CVE-2025-10055)
CVE-2025-12124 Cross-Site Scripting (XSS) in FitVids for (WordPress plugin) (CVE-2025-12124)
CVE-2025-12128 Cross-Site Request Forgery (CSRF) in Hide Categories Or Products On Shop Page (WordPress plugin) (CVE-2025-12128)
CVE-2025-12133 Vulnerability in EPROLO Dropshipping (WordPress plugin) (CVE-2025-12133)
CVE-2025-12153 Unrestricted File Upload in WordPress (CVE-2025-12153)
CVE-2025-13362 Cross-Site Request Forgery (CSRF) in Norby AI (WordPress plugin) (CVE-2025-13362)
CVE-2025-13494 Information Disclosure in SSP Debug (WordPress plugin) (CVE-2025-13494)
CVE-2025-13312 Vulnerability in CRM Memberships (WordPress plugin) (CVE-2025-13312)
CVE-2025-13313 Vulnerability in CRM Memberships (WordPress plugin) (CVE-2025-13313)
CVE-2025-12417 Cross-Site Scripting (XSS) in SurveyFunnel – Survey Plugin for (WordPress plugin) (CVE-2025-12417)
CVE-2025-13066 Unrestricted File Upload in Demo Importer Plus (WordPress plugin) (CVE-2025-13066)
CVE-2025-12630 Vulnerability in Upload.am (WordPress plugin) (CVE-2025-12630)
CVE-2025-13615 Vulnerability in StreamTube Core (WordPress plugin) (CVE-2025-13615)
CVE-2025-13737 Cross-Site Request Forgery (CSRF) in Nextend Social Login and Register (WordPress plugin) (CVE-2025-13737)
CVE-2025-10144 SQL Injection in Perfect Brands for WooCommerce (WordPress plugin) (CVE-2025-10144)
CVE-2025-12628 Vulnerability in WP (WordPress plugin) (CVE-2025-12628)
CVE-2025-12569 Vulnerability in Guest posting / Frontend Posting / Front Editor (WordPress plugin) (CVE-2025-12569)
CVE-2025-12629 Vulnerability in Broken Link Manager (WordPress plugin) (CVE-2025-12629)
CVE-2024-14015 Vulnerability in WordPress eCommerce Plugin (WordPress plugin) (CVE-2024-14015)
CVE-2025-12394 Vulnerability in Backup Migration (WordPress plugin) (CVE-2025-12394)
CVE-2025-7402 SQL Injection in Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager (WordPress plugin) (CVE-2025-7402)
CVE-2025-12800 SSRF (Server-Side Request Forgery) in WP Shortcodes Plugin — Shortcodes Ultimate (WordPress plugin) (CVE-2025-12800)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details