Sign in Sign up
JA · EN · FR
SecPulse

WordPress

🧱 Web Frameworks 📝 CMS 🏢 Vendors Related 10
slug: wordpress

Explanation

WordPressは世界中のWebサイトの約4割で使われているCMS (コンテンツ管理システム) です。 ブログ、企業サイト、ECサイトなど、プログラミング知識なしでサイトを作れるため非常に普及しています。 だからこそ攻撃者の標的にもなりやすく、プラグインの脆弱性経由で乗っ取られるケースが頻繁に報告されています。
📌 Example
2024年に LiteSpeed Cache プラグインの脆弱性 (CVE-2024-50550) が悪用され、数百万のWordPressサイトで管理者権限が奪取される事件が発生した。

🔖 Related tags

Apache47 Laravel7 Express5 Struts5 Drupal4 Ruby on Rails4 Django3 Echo3 React2 Symfony1 Joomla1 Flask1 Angular1 nginx1 Magento1 Rootio Linux419 Microsoft386 Java183 Jre178 Java Min178

🛡 Vulnerabilities tagged with this 2,692

ID Title
CVE-2026-9644 Cross-Site Scripting (XSS) in wordpress (CVE-2026-9644)
CVE-2026-7533 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-7533)
CVE-2026-9009 Unrestricted File Upload in wordpress (CVE-2026-9009)
CVE-2026-3173 Vulnerability in wordpress (CVE-2026-3173)
CVE-2026-9228 Vulnerability in wordpress (CVE-2026-9228)
CVE-2026-9241 Vulnerability in wordpress (CVE-2026-9241)
CVE-2026-5737 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-5737)
CVE-2026-7802 Vulnerability in wordpress (CVE-2026-7802)
CVE-2026-2374 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2374)
CVE-2026-4888 Vulnerability in wordpress (CVE-2026-4888)
CVE-2026-42760 Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and...
CVE-2026-42762 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-42746 Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for...
CVE-2026-42753 Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows...
CVE-2026-42735 Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare...
CVE-2026-42736 Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp...
CVE-2026-42737 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...
CVE-2026-42745 Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online...
CVE-2026-42730 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-3348 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3348)
CVE-2026-3349 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3349)
CVE-2026-42726 Vulnerability in wordpress (CVE-2026-42726)
CVE-2026-2280 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2280)
CVE-2026-2288 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2288)
CVE-2025-0898 Vulnerability in wordpress (CVE-2025-0898)
CVE-2026-7618 SQL Injection in wordpress (CVE-2026-7618)
CVE-2026-8832 Code Injection in wordpress (CVE-2026-8832)
CVE-2026-6169 Code Injection in wordpress (CVE-2026-6169)
CVE-2026-8042 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8042)
CVE-2026-8143 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8143)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →