Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 5,473
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache1534 nginx174 Drupal150 Express132 Laravel130 Django122 React108 Vue.js96 Symfony89 Spring82 Joomla81 Angular44 Flask42 Ruby on Rails42 Next.js34 Magento75 phpMyFAQ38 Strapi8 TYPO35 Shopware3

🛡 Vulnerabilities tagged with this 5,486

Image ID Title
CVE-2026-84069 Path Traversal in WebFacing (WordPress plugin) (CVE-2026-84069)
CVE-2026-82841 Information Disclosure in UpdraftPlus: WP Backup & Migration Plugin (WordPress plugin) (CVE-2026-82841)
CVE-2026-81655 Code Injection in Ad Inserter (WordPress plugin) (CVE-2026-81655)
CVE-2026-82901 Unrestricted File Upload in Ultra Addons for Contact Form (WordPress plugin) (CVE-2026-82901)
CVE-2026-85984 Authentication Bypass in miniOrange OTP Login, Verification and SMS Notifications (WordPress plugin) (CVE-2026-85984)
CVE-2026-77203 Privilege Escalation in Groups – Memberships and Access Control (WordPress plugin) (CVE-2026-77203)
CVE-2026-96525 Vulnerability in MCP Server for WordPress (WordPress plugin) (CVE-2026-96525)
CVE-2026-96524 Cross-Site Request Forgery (CSRF) in MCP Server for WordPress (WordPress plugin) (CVE-2026-96524)
CVE-2026-92411 Cross-Site Scripting (XSS) in WP Delicious (WordPress plugin) (CVE-2026-92411)
CVE-2026-96531 Cross-Site Scripting (XSS) in Optimole (WordPress plugin) (CVE-2026-96531)
CVE-2026-96533 SSRF (Server-Side Request Forgery) in Testimonials Widget (WordPress plugin) (CVE-2026-96533)
CVE-2026-96532 Vulnerability in Testimonials Widget (WordPress plugin) (CVE-2026-96532)
CVE-2026-96526 Information Disclosure in MCP Server for WordPress (WordPress plugin) (CVE-2026-96526)
CVE-2026-84095 Cross-Site Scripting (XSS) in wp-review-slider-pro (WordPress plugin) (CVE-2026-84095)
CVE-2026-19708 Information Disclosure in File Manager (WordPress plugin) (CVE-2026-19708)
CVE-2026-18143 Unrestricted File Upload in Request a Quote for WooCommerce (WordPress plugin) (CVE-2026-18143)
CVE-2026-89237 SQL Injection in Bluff Post (WordPress plugin) (CVE-2026-89237)
CVE-2026-84097 SQL Injection in wp-review-slider-pro (WordPress plugin) (CVE-2026-84097)
CVE-2026-85081 Cross-Site Scripting (XSS) in File Manager (WordPress plugin) (CVE-2026-85081)
CVE-2026-84096 Cross-Site Scripting (XSS) in wp-review-slider-pro (WordPress plugin) (CVE-2026-84096)
CVE-2026-16591 Cross-Site Scripting (XSS) in WP Directory Kit (WordPress plugin) (CVE-2026-16591)
CVE-2026-11871 Information Disclosure in Team Members (WordPress plugin) (CVE-2026-11871)
CVE-2026-15273 Cross-Site Scripting (XSS) in Automatic.css (WordPress plugin) (CVE-2026-15273)
CVE-2026-86837 Vulnerability in Bookly (WordPress plugin) (CVE-2026-86837)
CVE-2026-80514 Vulnerability in wpForo Forum (WordPress plugin) (CVE-2026-80514)
CVE-2026-88848 Authorization Flaw in MasterStudy LMS (WordPress plugin) (CVE-2026-88848)
CVE-2026-95866 Cross-Site Scripting (XSS) in WordPress (CVE-2026-95866)
CVE-2026-95864 Cross-Site Scripting (XSS) in Themify Builder (WordPress plugin) (CVE-2026-95864)
CVE-2026-94573 Cross-Site Scripting (XSS) in Repeater Fields for Elementor Forms (WordPress plugin) (CVE-2026-94573)
CVE-2026-96752 Cross-Site Scripting (XSS) in Zero Spam for (WordPress plugin) (CVE-2026-96752)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details