CVE-2025-54352

CVE-2025-54352 PoC 使用方法 WordPress PoC をインストールしてテストする手順: 1. Dockerを使用してWordPressの新規インストールを行う: 1.1 MySQLデータベースコンテナを起動する: docker run --name wp-db -e MYSQLDATABASE=wp-db -e MYSQLUSER=wpuser -e MYSQLPASSWORD=password -e MYSQLROOTPASSWORD=rootpass -d mysql:5.7 1.2 DBにリンクしたWordPressコンテナを起動する: docker run...

CVE-2025-66024

CVE-2025-66024: XWiki Blog Applicationホームページが投稿タイトルを介したStored XSSの脆弱性 概要 項目| 詳細 ---|--- CVE ID| CVE-2025-66024 重要度| HIGH アドバイザリ| アドバイザリを表示 発見者| Lukasz Rybak 影響を受ける製品 org.xwiki.contrib.blog:application-blog-ui バージョン: alert'XSS in title blog' 投稿を保存（公開）します。 ブログホームページで投稿を表示します。 パッチ...

WordPress MCP Server for WordPress plugin < 1.8.2 - Contributor+ Arbitrary Post Title Disclosure vulnerability

Contributor+ Arbitrary Post Title Disclosure vulnerability discovered by Raphael P. Cigana in WordPress Plugin MCP Server for WordPress versions 1.8.2...

CVE-2026-96526 MCP Server for WordPress < 1.8.2 - Contributor+ Arbitrary Post Title Disclosure via workflows/run REST Route

The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an object-level authorization check on one of its workflow REST routes, allowing users with the Contributor role to disclose the title and publication status of any post, page or custom post type, including other users'...

CVE-2026-96526 MCP Server for WordPress < 1.8.2 - Contributor+ Arbitrary Post Title Disclosure via workflows/run REST Route

The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an object-level authorization check on one of its workflow REST routes, allowing users with the Contributor role to disclose the title and publication status of any post, page or custom post type, including other users'...

CVE-2026-91009

The Active Woot Products Tables for WooCommerce. 100% FREE WordPress plugin (versions before 2.1.3 ) is vulnerable to unauthorized actions due to missing authorisation and CSRF checks in specific AJAX actions. This flaw allows any authenticated user, such as a subscriber , to modify the titles of...

CVE-2026-91009 Active Products Tables for WooCommerce < 2.1.3 - Subscriber+ Arbitrary Post Title Modification via woot_update_attachment

The Active Woot Products Tables for WooCommerce. 100% FREE WordPress plugin before 2.1.3 does not have authorisation and CSRF checks in some of its AJAX actions, allowing any authenticated users, such as subscriber, to change the title of arbitrary posts, pages and products...

WordPress Active Woot Products Tables for WooCommerce. 100% FREE plugin 2.1.2 - Subscriber+ Arbitrary Post Title Modification vulnerability

Subscriber+ Arbitrary Post Title Modification vulnerability discovered by JunHee CHO in WordPress Plugin Active Products Tables for WooCommerce versions 2.1.2...

CVE-2026-91009 Active Products Tables for WooCommerce < 2.1.3 - Subscriber+ Arbitrary Post Title Modification via woot_update_attachment

The Active Woot Products Tables for WooCommerce. 100% FREE WordPress plugin before 2.1.3 does not have authorisation and CSRF checks in some of its AJAX actions, allowing any authenticated users, such as subscriber, to change the title of arbitrary posts, pages and products...

CVE-2026-19719

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not escape the post title before outputting it in an inline JavaScript event handler, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks which are triggered when...

WordPress Rank Math SEO plugin < 1.0.277 - Author+ Term Metadata Update and Cross-Object Post Title Overwrite vulnerability

Author+ Term Metadata Update and Cross-Object Post Title Overwrite vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin Rank Math SEO versions 1.0.277...

CVE-2026-77787 Rank Math SEO < 1.0.277 - Author+ Term Metadata Update and Cross-Object Post Title Overwrite via updateMetaBulk

The Rank Math SEO WordPress plugin before 1.0.277 does not perform a capability check when bulk metadata updates target taxonomy terms, and reuses the supplied object identifier across object types, allowing users with the Author role and above to modify the SEO metadata of terms they cannot edit...

CVE-2026-19719

The Social Media Share Buttons & Social Sharing Icons WordPress plugin, in versions before 3.0.1 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to escape the post title before outputting it into an inline JavaScript event handler . This allows users with Cont...

EUVD-2026-69833

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not escape the post title before outputting it in an inline JavaScript event handler, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks which are triggered when...

CVE-2026-19719 Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Contributor+ Stored XSS via Post Title

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not escape the post title before outputting it in an inline JavaScript event handler, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks which are triggered when...

CVE-2026-19719 Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Contributor+ Stored XSS via Post Title

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not escape the post title before outputting it in an inline JavaScript event handler, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks which are triggered when...

PT-2026-84613

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not escape the post title before outputting it in an inline JavaScript event handler, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks which are triggered when...

CVE-2026-19719: Improper Neutralization of Input During Web Page Generation

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not escape the post title before outputting it in an inline JavaScript event handler, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks which are triggered when...

WordPress SmartCrawl plugin < 3.16.3 - Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key Enumeration vulnerability

Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key Enumeration vulnerability discovered by Ezekiel Victor in WordPress Plugin SmartCrawl versions 3.16.3...

WordPress Nested Pages plugin < 3.2.15 - Editor+ Stored XSS via Post Title vulnerability

Editor+ Stored XSS via Post Title vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin Nested Pages versions 3.2.15...