Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 5,473
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache1534 nginx174 Drupal150 Express132 Laravel130 Django122 React108 Vue.js96 Symfony89 Spring82 Joomla81 Angular44 Flask42 Ruby on Rails42 Next.js34 Magento75 phpMyFAQ38 Strapi8 TYPO35 Shopware3

🛡 Vulnerabilities tagged with this 5,486

Image ID Title
CVE-2026-101159 Cross-Site Scripting (XSS) in WP Ultimate Review (WordPress plugin) (CVE-2026-101159)
CVE-2026-100149 Information Disclosure in WordPress (CVE-2026-100149)
CVE-2026-100152 Code Injection in WordPress (CVE-2026-100152)
CVE-2026-100148 Cross-Site Scripting (XSS) in Rich Showcase for Google Reviews (WordPress plugin) (CVE-2026-100148)
CVE-2025-12828 Cross-Site Scripting (XSS) in Ultra Addons Lite for Elementor (WordPress plugin) (CVE-2025-12828)
CVE-2026-92826 Cross-Site Scripting (XSS) in EWWW Image Optimizer (WordPress plugin) (CVE-2026-92826)
CVE-2026-92977 Cross-Site Scripting (XSS) in Real Cookie Banner: GDPR & ePrivacy Cookie Consent (WordPress plugin) (CVE-2026-92977)
CVE-2026-97644 Privilege Escalation in Groundhogg — CRM, Newsletters, and Marketing Automation (WordPress plugin) (CVE-2026-97644)
CVE-2026-92538 Cross-Site Scripting (XSS) in WordPress (CVE-2026-92538)
CVE-2026-92551 Cross-Site Scripting (XSS) in WordPress (CVE-2026-92551)
CVE-2026-92727 Cross-Site Scripting (XSS) in WordPress (CVE-2026-92727)
CVE-2026-92536 Code Injection in WordPress (CVE-2026-92536)
CVE-2026-94378 Cross-Site Scripting (XSS) in WordPress (CVE-2026-94378)
CVE-2026-93428 Vulnerability in WordPress (CVE-2026-93428)
CVE-2026-96270 Cross-Site Scripting (XSS) in WordPress (CVE-2026-96270)
CVE-2026-94539 SQL Injection in WordPress (CVE-2026-94539)
CVE-2026-95865 SQL Injection in WordPress (CVE-2026-95865)
CVE-2026-92243 Cross-Site Scripting (XSS) in Ivory Search – WordPress Search Plugin (WordPress plugin) (CVE-2026-92243)
CVE-2026-100180 Cross-Site Scripting (XSS) in WordPress (CVE-2026-100180)
CVE-2026-39718 Cross-Site Request Forgery (CSRF) in Wallstreet (CVE-2026-39718)
CVE-2026-19856 Vulnerability in WordPress (CVE-2026-19856)
CVE-2014-125130 Path Traversal in WordPress (CVE-2014-125130)
CVE-2026-93875 Cross-Site Scripting (XSS) in JetAppointment (WordPress plugin) (CVE-2026-93875)
CVE-2026-19652 Privilege Escalation in Divi Membership (WordPress plugin) (CVE-2026-19652)
CVE-2026-97652 Cross-Site Scripting (XSS) in WordPress (CVE-2026-97652)
CVE-2026-94541 Vulnerability in WPMobile.App – Android and iOS App Builder (WordPress plugin) (CVE-2026-94541)
CVE-2026-87920 Cross-Site Scripting (XSS) in W3 Total Cache (WordPress plugin) (CVE-2026-87920)
CVE-2026-85492 Cross-Site Scripting (XSS) in WordPress (CVE-2026-85492)
CVE-2026-97663 Cross-Site Scripting (XSS) in Customer Reviews for WooCommerce (WordPress plugin) (CVE-2026-97663)
CVE-2026-97338 Cross-Site Scripting (XSS) in Download Manager (WordPress plugin) (CVE-2026-97338)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details