Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 5,473
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache1534 nginx174 Drupal150 Express132 Laravel130 Django122 React108 Vue.js96 Symfony89 Spring82 Joomla81 Angular44 Flask42 Ruby on Rails42 Next.js34 Magento75 phpMyFAQ38 Strapi8 TYPO35 Shopware3

🛡 Vulnerabilities tagged with this 5,486

Image ID Title
CVE-2026-13413 Vulnerability in CMP – Coming Soon & Maintenance (WordPress plugin) (CVE-2026-13413)
CVE-2026-102565 Cross-Site Scripting (XSS) in BA Book Everything (WordPress plugin) (CVE-2026-102565)
CVE-2026-97318 Open Redirect in Giveaways and Contests by RafflePress (WordPress plugin) (CVE-2026-97318)
CVE-2026-97317 Information Disclosure in Giveaways and Contests by RafflePress (WordPress plugin) (CVE-2026-97317)
CVE-2026-92174 Vulnerability in SiteOrigin Widgets Bundle (WordPress plugin) (CVE-2026-92174)
CVE-2026-92820 Unrestricted File Upload in Ninja Forms - File Uploads (WordPress plugin) (CVE-2026-92820)
CVE-2026-94298 SQL Injection in BuildKit (WordPress plugin) (CVE-2026-94298)
CVE-2026-91023 Vulnerability in Motors (WordPress plugin) (CVE-2026-91023)
CVE-2026-91828 Vulnerability in OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy (WordPress plugin) (CVE-2026-91828)
CVE-2026-91022 Cross-Site Scripting (XSS) in Motors (WordPress plugin) (CVE-2026-91022)
CVE-2026-90438 Cross-Site Scripting (XSS) in WordPress (CVE-2026-90438)
CVE-2026-90988 Information Disclosure in Request a Quote (WordPress plugin) (CVE-2026-90988)
CVE-2026-81740 Authentication Bypass in Paytm Payment Gateway (WordPress plugin) (CVE-2026-81740)
CVE-2026-84925 Cross-Site Scripting (XSS) in Avada | Website Builder For WordPress & WooCommerce (WordPress theme) (CVE-2026-84925)
CVE-2026-15897 Privilege Escalation in Super Forms – Drag & Drop Form Builder (WordPress plugin) (CVE-2026-15897)
CVE-2026-78471 Cross-Site Scripting (XSS) in Autoptimize (WordPress plugin) (CVE-2026-78471)
CVE-2026-85004 Vulnerability in Popup Maker (WordPress plugin) (CVE-2026-85004)
CVE-2026-85016 Cross-Site Scripting (XSS) in Unlimited Elements for Elementor (WordPress plugin) (CVE-2026-85016)
CVE-2026-15896 Vulnerability in Super Forms – Drag & Drop Form Builder (WordPress plugin) (CVE-2026-15896)
CVE-2026-13718 Cross-Site Scripting (XSS) in Tabs Responsive (WordPress plugin) (CVE-2026-13718)
CVE-2026-19660 Authentication Bypass in Divi Membership (WordPress plugin) (CVE-2026-19660)
CVE-2026-10026 Code Injection in CTX Feed Pro (WordPress plugin) (CVE-2026-10026)
CVE-2026-93367 Cross-Site Scripting (XSS) in Visitors Traffic Real Time Statistics Pro (WordPress plugin) (CVE-2026-93367)
CVE-2026-14378 Authentication Bypass in DevKit Pro (WordPress plugin) (CVE-2026-14378)
CVE-2026-101890 Cross-Site Scripting (XSS) in Prime Mover (WordPress plugin) (CVE-2026-101890)
CVE-2026-101889 Path Traversal in Prime Mover (WordPress plugin) (CVE-2026-101889)
CVE-2026-101888 Path Traversal in Prime Mover (WordPress plugin) (CVE-2026-101888)
CVE-2026-62071 SQL Injection in WordPress File Upload (CVE-2026-62071)
CVE-2026-103336 Vulnerability in WP Ultimate CSV Importer (CVE-2026-103336)
CVE-2026-92144 Cross-Site Scripting (XSS) in WordPress (CVE-2026-92144)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details