Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 5,473
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache1534 nginx174 Drupal150 Express132 Laravel130 Django122 React108 Vue.js96 Symfony89 Spring82 Joomla81 Angular44 Flask42 Ruby on Rails42 Next.js34 Magento75 phpMyFAQ38 Strapi8 TYPO35 Shopware3

🛡 Vulnerabilities tagged with this 5,473

Image ID Title
CVE-2025-10902 Vulnerability in Originality.ai AI Checker (WordPress plugin) (CVE-2025-10902)
CVE-2025-11172 Vulnerability in Check Plagiarism (WordPress plugin) (CVE-2025-11172)
CVE-2025-11504 Vulnerability in Quickcreator – AI Blog Writer (WordPress plugin) (CVE-2025-11504)
CVE-2025-10701 Cross-Site Scripting (XSS) in WordPress (CVE-2025-10701)
CVE-2025-10740 SQL Injection in URL Shortener Plugin For (WordPress plugin) (CVE-2025-10740)
CVE-2025-10748 SQL Injection in RapidResult (WordPress plugin) (CVE-2025-10748)
CVE-2025-10749 Vulnerability in Microsoft Azure Storage for (WordPress plugin) (CVE-2025-10749)
CVE-2025-10901 Vulnerability in Originality.ai AI Checker (WordPress plugin) (CVE-2025-10901)
CVE-2025-6440 Unrestricted File Upload in WooCommerce Designer Pro (WordPress plugin) (CVE-2025-6440)
CVE-2025-9978 Cross-Site Scripting (XSS) in Jeg Kit for Elementor (WordPress plugin) (CVE-2025-9978)
CVE-2025-10874 SSRF (Server-Side Request Forgery) in WordPress (CVE-2025-10874)
CVE-2025-10723 Path Traversal in PixelYourSite (WordPress plugin) (CVE-2025-10723)
CVE-2025-7730 Cross-Site Scripting (XSS) in Bold Page Builder (WordPress plugin) (CVE-2025-7730)
CVE-2025-8427 Cross-Site Scripting (XSS) in Beaver Builder Plugin (WordPress plugin) (CVE-2025-8427)
CVE-2025-11128 SSRF (Server-Side Request Forgery) in WordPress (CVE-2025-11128)
CVE-2025-10705 SSRF (Server-Side Request Forgery) in MxChat – AI Chatbot for (WordPress plugin) (CVE-2025-10705)
CVE-2025-62063 Cross-Site Scripting (XSS) in WP Travel Gutenberg Blocks (CVE-2025-62063)
CVE-2025-62069 Cross-Site Scripting (XSS) in MDTF (CVE-2025-62069)
CVE-2025-62048 Vulnerability in WordPress SmartCrawl (CVE-2025-62048)
CVE-2025-62025 Unsafe Deserialization in JobSearch (CVE-2025-62025)
CVE-2025-62006 Vulnerability in WP SMS (CVE-2025-62006)
CVE-2025-60227 Path Traversal in WP Pipes (CVE-2025-60227)
CVE-2025-60134 Cross-Site Request Forgery (CSRF) in WP Media Categories (CVE-2025-60134)
CVE-2025-60176 Cross-Site Scripting (XSS) in WP Tesseract (CVE-2025-60176)
CVE-2025-60209 Unsafe Deserialization in Connector for Gravity Forms and Google Sheets (CVE-2025-60209)
CVE-2025-58921 Cross-Site Scripting (XSS) in WP Tactical Popup (CVE-2025-58921)
CVE-2025-53428 Vulnerability in Simple User Registration (CVE-2025-53428)
CVE-2025-53422 Cross-Site Scripting (XSS) in WhatsApp Chat for WordPress and WooCommerce (CVE-2025-53422)
CVE-2025-53232 Vulnerability in WP Gmail SMTP (CVE-2025-53232)
CVE-2025-52756 Code Injection in WP Last Modified Info (CVE-2025-52756)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details