Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 5,473
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache1534 nginx174 Drupal150 Express132 Laravel130 Django122 React108 Vue.js96 Symfony89 Spring82 Joomla81 Angular44 Flask42 Ruby on Rails42 Next.js34 Magento75 phpMyFAQ38 Strapi8 TYPO35 Shopware3

🛡 Vulnerabilities tagged with this 5,486

Image ID Title
CVE-2026-96752 Cross-Site Scripting (XSS) in Zero Spam for (WordPress plugin) (CVE-2026-96752)
CVE-2026-93901 Privilege Escalation in Optima Express IDX (WordPress plugin) (CVE-2026-93901)
CVE-2026-93747 Cross-Site Scripting (XSS) in wpForo Forum (WordPress plugin) (CVE-2026-93747)
CVE-2026-93654 Cross-Site Scripting (XSS) in Premium Packages – Sell Digital Products Securely (WordPress plugin) (CVE-2026-93654)
CVE-2026-93656 Cross-Site Scripting (XSS) in WordPress (CVE-2026-93656)
CVE-2026-92713 Vulnerability in WordPress (CVE-2026-92713)
CVE-2026-84280 Cross-Site Scripting (XSS) in Fancy Product Designer (WordPress plugin) (CVE-2026-84280)
CVE-2026-19804 Code Injection in WordPress (CVE-2026-19804)
CVE-2026-88996 Cross-Site Scripting (XSS) in WordPress (CVE-2026-88996)
CVE-2026-17602 Path Traversal in WordPress (CVE-2026-17602)
CVE-2026-17577 Cross-Site Scripting (XSS) in SSL Zen (WordPress plugin) (CVE-2026-17577)
CVE-2026-89426 Privilege Escalation in WordPress (CVE-2026-89426)
CVE-2026-89406 Vulnerability in WordPress (CVE-2026-89406)
CVE-2026-13179 Cross-Site Scripting (XSS) in WordPress (CVE-2026-13179)
CVE-2026-13456 Vulnerability in WordPress (CVE-2026-13456)
CVE-2026-12037 SSRF (Server-Side Request Forgery) in Asset CleanUp: Page Speed Booster (WordPress plugin) (CVE-2026-12037)
CVE-2026-96766 Cross-Site Scripting (XSS) in WordPress (CVE-2026-96766)
CVE-2026-93899 SQL Injection in WordPress (CVE-2026-93899)
CVE-2026-94376 Cross-Site Scripting (XSS) in WordPress (CVE-2026-94376)
CVE-2026-93897 Cross-Site Scripting (XSS) in WordPress (CVE-2026-93897)
CVE-2026-93399 Vulnerability in Bookly (WordPress plugin) (CVE-2026-93399)
CVE-2026-96039 Cross-Site Scripting (XSS) in BA Book Everything (WordPress plugin) (CVE-2026-96039)
CVE-2026-84281 Cross-Site Scripting (XSS) in Fancy Product Designer (WordPress plugin) (CVE-2026-84281)
CVE-2026-89055 Vulnerability in Customer Reviews for WooCommerce (WordPress plugin) (CVE-2026-89055)
CVE-2026-92212 Cross-Site Scripting (XSS) in JetFormBuilder — Dynamic Blocks Form Builder (WordPress plugin) (CVE-2026-92212)
CVE-2026-92746 Cross-Site Scripting (XSS) in WordPress (CVE-2026-92746)
CVE-2026-92799 Vulnerability in Online Scheduling and Appointment Booking System – Bookly (WordPress plugin) (CVE-2026-92799)
CVE-2026-93303 Cross-Site Scripting (XSS) in WordPress (CVE-2026-93303)
CVE-2026-92829 Vulnerability in Blog2Social: Social Media Auto Post & Scheduler (WordPress plugin) (CVE-2026-92829)
CVE-2026-78393 Cross-Site Scripting (XSS) in Link Library (WordPress plugin) (CVE-2026-78393)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details