Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 5,473
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache1534 nginx174 Drupal150 Express132 Laravel130 Django122 React108 Vue.js96 Symfony89 Spring82 Joomla81 Angular44 Flask42 Ruby on Rails42 Next.js34 Magento75 phpMyFAQ38 Strapi8 TYPO35 Shopware3

🛡 Vulnerabilities tagged with this 5,473

Image ID Title
CVE-2026-84224 SSRF (Server-Side Request Forgery) in Kirki (WordPress plugin) (CVE-2026-84224)
CVE-2026-84220 Vulnerability in Kirki (WordPress plugin) (CVE-2026-84220)
CVE-2026-97075 Vulnerability in WP Rocket (CVE-2026-97075)
CVE-2025-14123 Privilege Escalation in Redux Framework (WordPress plugin) (CVE-2025-14123)
CVE-2026-93548 Privilege Escalation in FooSales (WordPress plugin) (CVE-2026-93548)
CVE-2026-92989 Vulnerability in SendPress Newsletters (WordPress plugin) (CVE-2026-92989)
CVE-2026-97076 Vulnerability in WP Rocket (CVE-2026-97076)
CVE-2026-92990 Information Disclosure in SendPress Newsletters (WordPress plugin) (CVE-2026-92990)
CVE-2026-81929 Cross-Site Scripting (XSS) in WordPress (CVE-2026-81929)
CVE-2026-86850 Vulnerability in SKU Error Fixer for WooCommerce (WordPress plugin) (CVE-2026-86850)
CVE-2026-88931 Vulnerability in Social Web Suite (WordPress plugin) (CVE-2026-88931)
CVE-2026-87841 Vulnerability in UnitechPay (WordPress plugin) (CVE-2026-87841)
CVE-2026-106095 Vulnerability in WordPress (CVE-2026-106095)
CVE-2026-106097 SQL Injection in WordPress (CVE-2026-106097)
CVE-2025-15700 Unrestricted File Upload in AWP Classifieds (WordPress plugin) (CVE-2025-15700)
CVE-2026-105436 Unsafe Deserialization in MainWP Child (CVE-2026-105436)
CVE-2026-62127 Cross-Site Scripting (XSS) in WP Plugin Info Card (CVE-2026-62127)
CVE-2026-62142 Cross-Site Request Forgery (CSRF) in WP (CVE-2026-62142)
CVE-2026-105078 Cross-Site Scripting (XSS) in WP Store Locator (CVE-2026-105078)
CVE-2026-103517 Vulnerability in Airwallex Online Payments Gateway (WordPress plugin) (CVE-2026-103517)
CVE-2026-93509 Vulnerability in Wallet System for WooCommerce (WordPress plugin) (CVE-2026-93509)
CVE-2026-105190 Vulnerability in Easy Digital Downloads (WordPress plugin) (CVE-2026-105190)
CVE-2026-104671 Vulnerability in TutorStarter (WordPress theme) (CVE-2026-104671)
CVE-2026-85097 Unrestricted File Upload in Bricksforge (WordPress plugin) (CVE-2026-85097)
CVE-2026-86826 Information Disclosure in BackWPup (WordPress plugin) (CVE-2026-86826)
CVE-2026-105198 Vulnerability in Appointment Booking Plugin (WordPress plugin) (CVE-2026-105198)
CVE-2026-105196 Vulnerability in Appointment Booking Plugin (WordPress plugin) (CVE-2026-105196)
CVE-2026-94244 Information Disclosure in Wallet System for WooCommerce (WordPress plugin) (CVE-2026-94244)
CVE-2026-105260 Cross-Site Request Forgery (CSRF) in Database Addon For WPForms (WordPress plugin) (CVE-2026-105260)
CVE-2026-105197 Vulnerability in Appointment Booking Plugin (WordPress plugin) (CVE-2026-105197)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details