Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 5,473
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache1534 nginx174 Drupal150 Express132 Laravel130 Django122 React108 Vue.js96 Symfony89 Spring82 Joomla81 Angular44 Flask42 Ruby on Rails42 Next.js34 Magento75 phpMyFAQ38 Strapi8 TYPO35 Shopware3

🛡 Vulnerabilities tagged with this 5,473

Image ID Title
CVE-2026-86827 Vulnerability in BackWPup (WordPress plugin) (CVE-2026-86827)
CVE-2026-94275 Information Disclosure in Track Orders for WooCommerce (WordPress plugin) (CVE-2026-94275)
CVE-2026-86828 Path Traversal in BackWPup (WordPress plugin) (CVE-2026-86828)
CVE-2026-94258 Information Disclosure in SMS Alert (WordPress plugin) (CVE-2026-94258)
CVE-2026-94246 Vulnerability in Wallet System for WooCommerce (WordPress plugin) (CVE-2026-94246)
CVE-2026-94245 Vulnerability in Wallet System for WooCommerce (WordPress plugin) (CVE-2026-94245)
CVE-2026-105194 Information Disclosure in Easy Digital Downloads (WordPress plugin) (CVE-2026-105194)
CVE-2026-104645 Vulnerability in Image Photo Gallery Final Tiles Grid (WordPress plugin) (CVE-2026-104645)
CVE-2026-103692 Privilege Escalation in Frontend Dashboard (WordPress plugin) (CVE-2026-103692)
CVE-2026-105195 Information Disclosure in Booking Calendar (WordPress plugin) (CVE-2026-105195)
CVE-2026-103646 Authentication Bypass in Ultimate Multisite (WordPress plugin) (CVE-2026-103646)
CVE-2026-104646 Cross-Site Scripting (XSS) in Image Photo Gallery Final Tiles Grid (WordPress plugin) (CVE-2026-104646)
CVE-2026-103309 Cross-Site Scripting (XSS) in GPTranslate (WordPress plugin) (CVE-2026-103309)
CVE-2026-105193 Vulnerability in Booking Calendar (WordPress plugin) (CVE-2026-105193)
CVE-2026-17196 Unrestricted File Upload in Super Forms – Drag & Drop Form Builder (WordPress plugin) (CVE-2026-17196)
CVE-2026-17609 Unrestricted File Upload in Super Forms – Drag & Drop Form Builder (WordPress plugin) (CVE-2026-17609)
CVE-2026-82627 Unsafe Deserialization in WordPress (CVE-2026-82627)
CVE-2026-94154 Cross-Site Scripting (XSS) in Aurora Heatmap (WordPress plugin) (CVE-2026-94154)
CVE-2026-17538 Vulnerability in LatePoint - Appointment Booking & Reservation (WordPress plugin) (CVE-2026-17538)
CVE-2026-42708 SQL Injection in WP Post Author (CVE-2026-42708)
CVE-2026-103075 Vulnerability in WordPress Hustle (CVE-2026-103075)
CVE-2026-89417 Cross-Site Scripting (XSS) in WordPress Apache (CVE-2026-89417)
CVE-2026-96530 Information Disclosure in Optimole (WordPress plugin) (CVE-2026-96530)
CVE-2026-97188 Unsafe Deserialization in String locator (WordPress plugin) (CVE-2026-97188)
CVE-2026-97331 Information Disclosure in WordPress (CVE-2026-97331)
CVE-2026-97354 SSRF (Server-Side Request Forgery) in PowerPress Podcasting plugin by Blubrry (WordPress plugin) (CVE-2026-97354)
CVE-2026-87782 Privilege Escalation in Koinonia Link (WordPress plugin) (CVE-2026-87782)
CVE-2026-86833 Vulnerability in MetForm (WordPress plugin) (CVE-2026-86833)
CVE-2026-82211 Vulnerability in Nexi XPay Build (WordPress plugin) (CVE-2026-82211)
CVE-2026-86816 Information Disclosure in WPCafe (WordPress plugin) (CVE-2026-86816)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details