Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 10
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache47 Laravel7 Express5 Struts5 Drupal4 Ruby on Rails4 Django3 Echo3 React2 Symfony1 Joomla1 Flask1 Angular1 nginx1 Magento1 Rootio Linux419 Microsoft386 Java183 Jre178 Java Min178

🛡 Vulnerabilities tagged with this 2,684

ID Title
CVE-2026-3499 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-3499)
CVE-2026-3296 Unsafe Deserialization in wordpress (CVE-2026-3296)
CVE-2025-14732 Vulnerability in wordpress (CVE-2025-14732)
CVE-2026-4065 Vulnerability in wordpress (CVE-2026-4065)
CVE-2026-2936 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2936)
CVE-2026-3309 Code Injection in wordpress (CVE-2026-3309)
CVE-2026-3666 Path Traversal in wordpress (CVE-2026-3666)
CVE-2026-1233 The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing...
CVE-2026-0626 Cross-Site Scripting (XSS) in wordpress (CVE-2026-0626)
CVE-2025-14938 Unrestricted File Upload in wordpress (CVE-2025-14938)
CVE-2026-2826 Vulnerability in wordpress (CVE-2026-2826)
CVE-2026-3445 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass i...
CVE-2026-5425 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5425)
CVE-2026-2437 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2437)
CVE-2026-4896 The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inclu...
CVE-2026-0737 Cross-Site Scripting (XSS) in wordpress (CVE-2026-0737)
CVE-2026-0738 Cross-Site Scripting (XSS) in wordpress (CVE-2026-0738)
CVE-2026-2600 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2600)
CVE-2025-15064 Cross-Site Scripting (XSS) in wordpress (CVE-2025-15064)
CVE-2026-0552 Cross-Site Scripting (XSS) in wordpress (CVE-2026-0552)
CVE-2026-0664 Cross-Site Scripting (XSS) in wordpress (CVE-2026-0664)
CVE-2025-13368 Cross-Site Scripting (XSS) in wordpress (CVE-2025-13368)
CVE-2026-2949 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2949)
CVE-2026-2924 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2924)
CVE-2026-3571 Vulnerability in wordpress (CVE-2026-3571)
CVE-2026-4350 The Perfmatters plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 2.5.9.1. This is due to the `PMCS::action_handler()` method proce...
CVE-2026-4267 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4267)
CVE-2026-3139 Vulnerability in wordpress (CVE-2026-3139)
CVE-2026-3191 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-3191)
CVE-2026-33559 Cross-Site Scripting (XSS) in wordpress (CVE-2026-33559)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →