Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 5,473
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache1534 nginx174 Drupal150 Express132 Laravel130 Django122 React108 Vue.js96 Symfony89 Spring82 Joomla81 Angular44 Flask42 Ruby on Rails42 Next.js34 Magento75 phpMyFAQ38 Strapi8 TYPO35 Shopware3

🛡 Vulnerabilities tagged with this 5,533

Image ID Title
CVE-2026-85198 SQL Injection in WordPress (CVE-2026-85198)
CVE-2026-78175 Unsafe Deserialization in Tutor LMS – eLearning and online course solution (WordPress plugin) (CVE-2026-78175)
CVE-2026-16482 SQL Injection in rtMedia for WordPress, BuddyPress and bbPress (WordPress plugin) (CVE-2026-16482)
CVE-2026-17585 Information Disclosure in WordPress (CVE-2026-17585)
CVE-2026-11355 Vulnerability in DT LMS – elearning, WordPress LMS (WordPress plugin) (CVE-2026-11355)
CVE-2026-87916 Information Disclosure in WPBot (WordPress plugin) (CVE-2026-87916)
CVE-2026-87894 Vulnerability in Rox Appointment Booking (WordPress plugin) (CVE-2026-87894)
CVE-2026-87892 Vulnerability in Rox Appointment Booking (WordPress plugin) (CVE-2026-87892)
CVE-2026-87891 Vulnerability in Rox Appointment Booking (WordPress plugin) (CVE-2026-87891)
CVE-2026-87919 Vulnerability in Product XML Feed Manager for WooCommerce (WordPress plugin) (CVE-2026-87919)
CVE-2026-87918 Vulnerability in WPBot (WordPress plugin) (CVE-2026-87918)
CVE-2026-84099 Unsafe Deserialization in wpstorecart (WordPress plugin) (CVE-2026-84099)
CVE-2026-87797 Vulnerability in Sprout Invoices (WordPress plugin) (CVE-2026-87797)
CVE-2026-87842 Information Disclosure in Zonify (WordPress plugin) (CVE-2026-87842)
CVE-2026-87888 Cross-Site Scripting (XSS) in YayPricing (WordPress plugin) (CVE-2026-87888)
CVE-2026-86790 Cross-Site Scripting (XSS) in WP Highlight Box (WordPress plugin) (CVE-2026-86790)
CVE-2026-87759 Privilege Escalation in Add User Autocomplete (WordPress plugin) (CVE-2026-87759)
CVE-2026-85681 Privilege Escalation in WP Component (WordPress plugin) (CVE-2026-85681)
CVE-2026-84171 Unrestricted File Upload in WP images upload on piclect (WordPress plugin) (CVE-2026-84171)
CVE-2026-82845 Unsafe Deserialization in Masteriyo LMS (WordPress plugin) (CVE-2026-82845)
CVE-2026-84047 SQL Injection in Album Cover Finder (WordPress plugin) (CVE-2026-84047)
CVE-2026-84025 Vulnerability in BEAR (WordPress plugin) (CVE-2026-84025)
CVE-2026-84024 Cross-Site Request Forgery (CSRF) in BEAR (WordPress plugin) (CVE-2026-84024)
CVE-2026-84023 Cross-Site Request Forgery (CSRF) in BEAR (WordPress plugin) (CVE-2026-84023)
CVE-2026-82851 Vulnerability in Masteriyo LMS (WordPress plugin) (CVE-2026-82851)
CVE-2026-83532 Cross-Site Scripting (XSS) in Custom Menu Wizard Widget (WordPress plugin) (CVE-2026-83532)
CVE-2026-82847 Cross-Site Scripting (XSS) in Masteriyo LMS (WordPress plugin) (CVE-2026-82847)
CVE-2026-77753 Vulnerability in Temporary Login Without Password (WordPress plugin) (CVE-2026-77753)
CVE-2026-78152 Information Disclosure in SureRank SEO (WordPress plugin) (CVE-2026-78152)
CVE-2026-77752 Privilege Escalation in Temporary Login Without Password (WordPress plugin) (CVE-2026-77752)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details