slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,512

Image ID Title
CVE-2026-18364 Vulnerability in zportals (WordPress plugin) (CVE-2026-18364)
CVE-2026-18365 Information Disclosure in zportals (WordPress plugin) (CVE-2026-18365)
CVE-2026-77765 Vulnerability in Better Payment (WordPress plugin) (CVE-2026-77765)
CVE-2026-75799 Code Injection in YAHMAN Add-ons (WordPress plugin) (CVE-2026-75799)
CVE-2026-14321 Vulnerability in divi-dash (WordPress plugin) (CVE-2026-14321)
CVE-2025-15696 Cross-Site Scripting (XSS) in Real3D Flipbook (WordPress plugin) (CVE-2025-15696)
CVE-2026-16264 Vulnerability in Newsletters (WordPress plugin) (CVE-2026-16264)
CVE-2022-4997 SQL Injection in jet-form-builder-stripe-gateway (WordPress plugin) (CVE-2022-4997)
CVE-2026-93344 Vulnerability in MarketKing plugin for WordPress (CVE-2026-93344)
CVE-2026-93341 Vulnerability in MarketKing plugin for WordPress (CVE-2026-93341)
CVE-2026-93343 Vulnerability in MarketKing plugin for WordPress (CVE-2026-93343)
CVE-2026-93342 Vulnerability in MarketKing plugin for WordPress (CVE-2026-93342)
CVE-2026-94117 SQL Injection in HashBar – WordPress Notification Bar (CVE-2026-94117)
CVE-2026-9231 Vulnerability in WordPress (CVE-2026-9231)
CVE-2026-15095 Path Traversal in WordPress (CVE-2026-15095)
CVE-2026-9004 Information Disclosure in WP-CRM System – Manage Clients and Projects (WordPress plugin) (CVE-2026-9004)
CVE-2026-93836 Cross-Site Scripting (XSS) in WPC Product Bundles for WooCommerce (WordPress plugin) (CVE-2026-93836)
CVE-2026-93778 Cross-Site Scripting (XSS) in WP Yelp Review Slider (WordPress plugin) (CVE-2026-93778)
CVE-2026-92235 Code Injection in WP Ultimate Review (WordPress plugin) (CVE-2026-92235)
CVE-2026-91092 Vulnerability in wpForo Forum (WordPress plugin) (CVE-2026-91092)
CVE-2026-92969 Vulnerability in HUSKY – Products Filter for WooCommerce Professional (WordPress plugin) (CVE-2026-92969)
CVE-2026-7622 Vulnerability in ThumbPress (WordPress plugin) (CVE-2026-7622)
CVE-2026-18439 Vulnerability in Tutor LMS – eLearning and online course solution (WordPress plugin) (CVE-2026-18439)
CVE-2026-1645 Cross-Site Scripting (XSS) in Hostel (WordPress plugin) (CVE-2026-1645)
CVE-2026-6922 Authorization Flaw in WordPress (CVE-2026-6922)
CVE-2026-4123 Vulnerability in RW Elephant Rental Inventory (WordPress plugin) (CVE-2026-4123)
CVE-2026-18345 Vulnerability in WP User Manager (WordPress plugin) (CVE-2026-18345)
CVE-2026-16778 Cross-Site Scripting (XSS) in Live Composer – Free WordPress Website Builder (WordPress plugin) (CVE-2026-16778)
CVE-2025-1281 Path Traversal in BM Content Builder (WordPress plugin) (CVE-2025-1281)
CVE-2025-1280 Path Traversal in BM Content Builder (WordPress plugin) (CVE-2025-1280)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details