slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,473

Image ID Title
CVE-2025-52737 Unsafe Deserialization in WP Store Locator (CVE-2025-52737)
CVE-2025-49955 Cross-Site Scripting (XSS) in WP Smart Flexslider (CVE-2025-49955)
CVE-2025-49960 Cross-Site Scripting (XSS) in LeadBI Plugin for WordPress (CVE-2025-49960)
CVE-2025-49953 Cross-Site Scripting (XSS) in ShareBang, Ultimate Social Share Buttons for WordPress (CVE-2025-49953)
CVE-2025-49948 Cross-Site Scripting (XSS) in WP Super Edit (CVE-2025-49948)
CVE-2025-49954 Cross-Site Scripting (XSS) in WP-Click-Tracker (CVE-2025-49954)
CVE-2025-49899 Vulnerability in Whydonate (CVE-2025-49899)
CVE-2025-49907 Vulnerability in MDTF (CVE-2025-49907)
CVE-2025-48338 Vulnerability in WP Abstracts (CVE-2025-48338)
CVE-2025-11086 Privilege Escalation in WordPress (CVE-2025-11086)
CVE-2025-6833 Vulnerability in WordPress (CVE-2025-6833)
CVE-2025-11883 Cross-Site Scripting (XSS) in Responsive Progress Bar (WordPress plugin) (CVE-2025-11883)
CVE-2025-11867 Cross-Site Scripting (XSS) in Bg Book Publisher (WordPress plugin) (CVE-2025-11867)
CVE-2025-11870 Cross-Site Scripting (XSS) in Simple Business Data (WordPress plugin) (CVE-2025-11870)
CVE-2025-11872 Cross-Site Scripting (XSS) in Material Design Iconic Font Integration (WordPress plugin) (CVE-2025-11872)
CVE-2025-11878 Cross-Site Scripting (XSS) in ST Categories Widget (WordPress plugin) (CVE-2025-11878)
CVE-2025-11880 Cross-Site Scripting (XSS) in SM CountDown Widget (WordPress plugin) (CVE-2025-11880)
CVE-2025-11827 Cross-Site Scripting (XSS) in Oboxmedia Ads (WordPress plugin) (CVE-2025-11827)
CVE-2025-11825 Cross-Site Scripting (XSS) in Playerzbr (WordPress plugin) (CVE-2025-11825)
CVE-2025-11830 Cross-Site Scripting (XSS) in WP Restaurant Listings (WordPress plugin) (CVE-2025-11830)
CVE-2025-11834 Cross-Site Scripting (XSS) in WP AD Gallery (WordPress plugin) (CVE-2025-11834)
CVE-2025-11866 Cross-Site Scripting (XSS) in Photographers galleries (WordPress plugin) (CVE-2025-11866)
CVE-2025-11811 Cross-Site Scripting (XSS) in Simple Youtube Shortcode (WordPress plugin) (CVE-2025-11811)
CVE-2025-11813 Cross-Site Scripting (XSS) in Responsive iframe GoogleMap (WordPress plugin) (CVE-2025-11813)
CVE-2025-11817 Cross-Site Scripting (XSS) in Simple Tableau Viz (WordPress plugin) (CVE-2025-11817)
CVE-2025-11818 Cross-Site Scripting (XSS) in WP Responsive Meet The Team (WordPress plugin) (CVE-2025-11818)
CVE-2025-11819 Cross-Site Scripting (XSS) in WP-Thumbnail (WordPress plugin) (CVE-2025-11819)
CVE-2025-11824 Cross-Site Scripting (XSS) in Cinza Grid (WordPress plugin) (CVE-2025-11824)
CVE-2025-11804 Cross-Site Scripting (XSS) in JB News Ticker (WordPress plugin) (CVE-2025-11804)
CVE-2025-11807 Cross-Site Scripting (XSS) in Mixlr Shortcode (WordPress plugin) (CVE-2025-11807)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details