slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,533

Image ID Title
CVE-2026-87959 Vulnerability in WPBot (WordPress plugin) (CVE-2026-87959)
CVE-2026-87854 Information Disclosure in Subscriptions for WooCommerce (WordPress plugin) (CVE-2026-87854)
CVE-2026-87828 Vulnerability in Seraphinite Accelerator (WordPress plugin) (CVE-2026-87828)
CVE-2026-86823 Open Redirect in Newsletter (WordPress plugin) (CVE-2026-86823)
CVE-2026-89327 Vulnerability in FluentBoards (WordPress plugin) (CVE-2026-89327)
CVE-2026-89328 Vulnerability in FluentBoards (WordPress plugin) (CVE-2026-89328)
CVE-2026-88910 Vulnerability in kboard (WordPress plugin) (CVE-2026-88910)
CVE-2026-85572 Information Disclosure in Tutor LMS (WordPress plugin) (CVE-2026-85572)
CVE-2026-85641 Vulnerability in Formidable Forms (WordPress plugin) (CVE-2026-85641)
CVE-2026-85569 Privilege Escalation in Tutor LMS (WordPress plugin) (CVE-2026-85569)
CVE-2026-85349 Information Disclosure in FluentBoards (WordPress plugin) (CVE-2026-85349)
CVE-2026-85530 Privilege Escalation in GiveWP (WordPress plugin) (CVE-2026-85530)
CVE-2026-86784 Cross-Site Scripting (XSS) in Visualizer (WordPress plugin) (CVE-2026-86784)
CVE-2026-86445 Information Disclosure in LearnPress (WordPress plugin) (CVE-2026-86445)
CVE-2026-86444 Cross-Site Scripting (XSS) in LearnPress (WordPress plugin) (CVE-2026-86444)
CVE-2026-86448 Information Disclosure in LearnPress (WordPress plugin) (CVE-2026-86448)
CVE-2026-86449 Information Disclosure in LearnPress (WordPress plugin) (CVE-2026-86449)
CVE-2026-86447 Information Disclosure in LearnPress (WordPress plugin) (CVE-2026-86447)
CVE-2026-82125 Vulnerability in Schema & Structured Data for WP & AMP (WordPress plugin) (CVE-2026-82125)
CVE-2026-82126 Vulnerability in Schema & Structured Data for WP & AMP (WordPress plugin) (CVE-2026-82126)
CVE-2026-84088 Cross-Site Scripting (XSS) in Xpro Addons — 140+ Widgets for Elementor (WordPress plugin) (CVE-2026-84088)
CVE-2026-84829 Cross-Site Scripting (XSS) in Optimole (WordPress plugin) (CVE-2026-84829)
CVE-2026-84905 Vulnerability in Eventin (WordPress plugin) (CVE-2026-84905)
CVE-2026-84907 Vulnerability in Eventin (WordPress plugin) (CVE-2026-84907)
CVE-2026-82124 Information Disclosure in Schema & Structured Data for WP & AMP (WordPress plugin) (CVE-2026-82124)
CVE-2026-85131 Cross-Site Request Forgery (CSRF) in WPLP Cookie Consent (WordPress plugin) (CVE-2026-85131)
CVE-2026-76556 SQL Injection in WP Import Export Lite (WordPress plugin) (CVE-2026-76556)
CVE-2026-76552 Unrestricted File Upload in WP Import Export Lite (WordPress plugin) (CVE-2026-76552)
CVE-2026-76553 Vulnerability in WP Import Export Lite (WordPress plugin) (CVE-2026-76553)
CVE-2026-76555 Path Traversal in WP Import Export Lite (WordPress plugin) (CVE-2026-76555)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details