Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 5,552
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache1537 nginx176 Drupal150 Express133 Laravel131 Django124 React108 Vue.js97 Symfony89 Spring82 Joomla81 Angular44 Flask42 Ruby on Rails42 Next.js34 Magento75 phpMyFAQ38 Strapi8 TYPO35 Shopware3

🛡 Vulnerabilities tagged with this 5,852

Image ID Title
CVE-2026-12743 SQL Injection in WordPress (CVE-2026-12743)
CVE-2026-18039 Privilege Escalation in Essential Addons for Elementor (WordPress plugin) (CVE-2026-18039)
CVE-2026-15205 SQL Injection in Paymob for WooCommerce (WordPress plugin) (CVE-2026-15205)
CVE-2025-10308 Cross-Site Request Forgery (CSRF) in Astro Booking Engine (WordPress plugin) (CVE-2025-10308)
CVE-2026-18109 Cross-Site Scripting (XSS) in W3 Total Cache (WordPress plugin) (CVE-2026-18109)
CVE-2026-28154 Cross-Site Scripting (XSS) in Samex - Clean, Minimal Shop WooCommerce WordPress Theme (CVE-2026-28154)
CVE-2026-66426 Cross-Site Scripting (XSS) in WP-Stats (CVE-2026-66426)
CVE-2026-15413 Vulnerability in Link Factory (WordPress plugin) (CVE-2026-15413)
CVE-2026-14332 Vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart (WordPress plugin) (CVE-2026-14332)
CVE-2026-3639 Cross-Site Scripting (XSS) in PPWP – Password Protect Pages (WordPress plugin) (CVE-2026-3639)
CVE-2026-18146 Cross-Site Scripting (XSS) in WordPress (CVE-2026-18146)
CVE-2026-3835 Vulnerability in Prevent Direct Access – Protect WordPress Files (WordPress plugin) (CVE-2026-3835)
CVE-2026-18945 Vulnerability in WP Helper Premium (WordPress plugin) (CVE-2026-18945)
CVE-2026-13610 Privilege Escalation in KiviCare (WordPress plugin) (CVE-2026-13610)
CVE-2026-14213 Vulnerability in Booking for Appointments and Events Calendar (WordPress plugin) (CVE-2026-14213)
CVE-2026-19088 Cross-Site Request Forgery (CSRF) in ShopEngine Elementor WooCommerce Builder Addon (WordPress plugin) (CVE-2026-19088)
CVE-2026-14182 Authentication Bypass in Customer Email Verification for WooCommerce (WordPress plugin) (CVE-2026-14182)
CVE-2026-13328 Vulnerability in Food Menu (WordPress plugin) (CVE-2026-13328)
CVE-2026-49466 Cross-Site Scripting (XSS) in WordPress Draft List (CVE-2026-49466)
CVE-2026-15045 Vulnerability in Wallet System for WooCommerce (WordPress plugin) (CVE-2026-15045)
CVE-2026-16621 Vulnerability in Payment Gateway for PayPal on WooCommerce (WordPress plugin) (CVE-2026-16621)
CVE-2026-17008 Vulnerability in Quick Paypal Payments (WordPress plugin) (CVE-2026-17008)
CVE-2026-16990 Vulnerability in Payment Button for PayPal (WordPress plugin) (CVE-2026-16990)
CVE-2026-15213 Vulnerability in Welcart e-Commerce (WordPress plugin) (CVE-2026-15213)
CVE-2026-18044 Vulnerability in Estatik Real Estate Plugin (WordPress plugin) (CVE-2026-18044)
CVE-2026-16747 Vulnerability in Kirki (WordPress plugin) (CVE-2026-16747)
CVE-2026-19050 SSRF (Server-Side Request Forgery) in ProSolution WP Client (WordPress plugin) (CVE-2026-19050)
CVE-2026-16066 Cross-Site Scripting (XSS) in Welcart e-Commerce (WordPress plugin) (CVE-2026-16066)
CVE-2026-15388 Authorization Flaw in Cookie Consent (WordPress plugin) (CVE-2026-15388)
CVE-2026-15249 Cross-Site Scripting (XSS) in Patterns Kit (WordPress plugin) (CVE-2026-15249)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details