slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,473

Image ID Title
CVE-2026-75962 Cross-Site Scripting (XSS) in WordPress (CVE-2026-75962)
CVE-2026-103066 SQL Injection in WP BASE Booking (CVE-2026-103066)
CVE-2026-103348 Unsafe Deserialization in WP Ultimate Exporter (CVE-2026-103348)
CVE-2026-100506 Unsafe Deserialization in WP Spell Check (CVE-2026-100506)
CVE-2026-97305 Vulnerability in AI Chatbot for WordPress – Hyve Lite (CVE-2026-97305)
CVE-2026-103085 Vulnerability in WP User Manager (CVE-2026-103085)
CVE-2026-103352 SQL Injection in WP BASE Booking (CVE-2026-103352)
CVE-2026-105397 Cross-Site Scripting (XSS) in LearnPress plugin for WordPress (CVE-2026-105397)
CVE-2026-103684 Vulnerability in WP Event Solution (CVE-2026-103684)
CVE-2026-105073 Vulnerability in WP Event Solution (CVE-2026-105073)
CVE-2026-39763 Vulnerability in WP Dummy Content Generator (CVE-2026-39763)
CVE-2026-105062 Vulnerability in WP Admin Audit (CVE-2026-105062)
CVE-2026-105055 Vulnerability in WP Mailster (CVE-2026-105055)
CVE-2026-78371 Vulnerability in File Uploads Addon for WooCommerce (WordPress plugin) (CVE-2026-78371)
CVE-2026-84169 Vulnerability in UPI QR Code Payment Gateway (WordPress plugin) (CVE-2026-84169)
CVE-2026-13607 Vulnerability in File Uploads Addon for WooCommerce (WordPress plugin) (CVE-2026-13607)
CVE-2026-97276 Cross-Site Scripting (XSS) in WP Statistics (CVE-2026-97276)
CVE-2026-97332 Vulnerability in WordPress (CVE-2026-97332)
CVE-2026-93549 Cross-Site Request Forgery (CSRF) in CoCart (WordPress plugin) (CVE-2026-93549)
CVE-2026-86817 Information Disclosure in Five Star Business Profile and Schema (WordPress plugin) (CVE-2026-86817)
CVE-2026-17005 Cross-Site Scripting (XSS) in Horizontal scrolling announcements (WordPress plugin) (CVE-2026-17005)
CVE-2026-104119 Cross-Site Scripting (XSS) in Simple Shopping Cart (WordPress plugin) (CVE-2026-104119)
CVE-2026-104118 Vulnerability in Razorpay for WooCommerce (WordPress plugin) (CVE-2026-104118)
CVE-2026-92767 Cross-Site Scripting (XSS) in Twenty20 Image Before-After (WordPress plugin) (CVE-2026-92767)
CVE-2026-92084 Code Injection in WordPress (CVE-2026-92084)
CVE-2026-97660 Cross-Site Scripting (XSS) in WPC Product Options for WooCommerce (WordPress plugin) (CVE-2026-97660)
CVE-2026-94505 Vulnerability in WordPress (CVE-2026-94505)
CVE-2026-96267 SQL Injection in WP Visitor Statistics (WordPress plugin) (CVE-2026-96267)
CVE-2026-97343 Authentication Bypass in Burst Statistics – Simple WordPress Analytics (WordPress plugin) (CVE-2026-97343)
CVE-2026-87115 Path Traversal in VikAppointments Services Booking Calendar (WordPress plugin) (CVE-2026-87115)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details