{"id":8244,"date":"2026-11-04T13:34:39","date_gmt":"2026-11-04T04:34:39","guid":{"rendered":"https:\/\/wpmake.jp\/contents\/?post_type=knowledge&#038;p=8244"},"modified":"2026-11-06T11:43:35","modified_gmt":"2026-11-06T02:43:35","slug":"202610wp-news","status":"publish","type":"knowledge","link":"https:\/\/wpmake.jp\/contents\/knowledge\/202610wp-news\/","title":{"rendered":"\u30102026\u5e7410\u6708\u3011WordPress\u8106\u5f31\u6027\u60c5\u5831\uff06\u6ce8\u76ee\u30cb\u30e5\u30fc\u30b9 \u307e\u3068\u3081\uff5cPHP\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cPHP2Shell\u300d\uff1aWordPress\u30b5\u30a4\u30c8\u3082\u4eca\u3059\u3050PHP\u306e\u66f4\u65b0\u3092"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u76ee\u6b21<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #282828;color:#282828\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #282828;color:#282828\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/wpmake.jp\/contents\/knowledge\/202610wp-news\/#PHP%E3%81%AB%E9%87%8D%E5%A4%A7%E3%81%AA%E8%84%86%E5%BC%B1%E6%80%A7%E3%80%8CPHP2Shell%E3%80%8D%EF%BC%9AWordPress%E3%82%B5%E3%82%A4%E3%83%88%E3%82%82%E6%97%A9%E6%80%A5%E3%81%ABPHP%E3%81%AE%E6%9B%B4%E6%96%B0%E3%82%92\" >PHP\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cPHP2Shell\u300d\uff1aWordPress\u30b5\u30a4\u30c8\u3082\u65e9\u6025\u306bPHP\u306e\u66f4\u65b0\u3092<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/wpmake.jp\/contents\/knowledge\/202610wp-news\/#PHP2Shell%E3%81%A8%E3%81%AF%EF%BC%9A2%E4%BB%B6%E3%81%AE%E8%84%86%E5%BC%B1%E6%80%A7%E3%81%A8%E5%BD%B1%E9%9F%BF%E7%AF%84%E5%9B%B2\" >PHP2Shell\u3068\u306f\uff1a2\u4ef6\u306e\u8106\u5f31\u6027\u3068\u5f71\u97ff\u7bc4\u56f2<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/wpmake.jp\/contents\/knowledge\/202610wp-news\/#WordPress%E3%82%B5%E3%82%A4%E3%83%88%E3%81%A7%E5%BF%85%E8%A6%81%E3%81%AA%E5%AF%BE%E5%BF%9C\" >WordPress\u30b5\u30a4\u30c8\u3067\u5fc5\u8981\u306a\u5bfe\u5fdc<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/wpmake.jp\/contents\/knowledge\/202610wp-news\/#%E3%80%8CRank_Math_SEO_PRO%E3%80%8D%E3%81%AE%E6%AD%A3%E8%A6%8F%E3%82%A2%E3%83%83%E3%83%97%E3%83%87%E3%83%BC%E3%83%88%E3%81%AB%E3%83%9E%E3%83%AB%E3%82%A6%E3%82%A7%E3%82%A2%E3%81%8C%E6%B7%B7%E5%85%A5%EF%BC%9A%E8%A9%B2%E5%BD%93%E3%82%B5%E3%82%A4%E3%83%88%E3%81%AF%E4%BE%B5%E5%AE%B3%E3%81%95%E3%82%8C%E3%81%9F%E5%89%8D%E6%8F%90%E3%81%A7%E5%AF%BE%E5%87%A6%E3%82%92\" >\u300cRank Math SEO PRO\u300d\u306e\u6b63\u898f\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306b\u30de\u30eb\u30a6\u30a7\u30a2\u304c\u6df7\u5165\uff1a\u8a72\u5f53\u30b5\u30a4\u30c8\u306f\u4fb5\u5bb3\u3055\u308c\u305f\u524d\u63d0\u3067\u5bfe\u51e6\u3092<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/wpmake.jp\/contents\/knowledge\/202610wp-news\/#%E5%BD%B1%E9%9F%BF%E3%82%92%E5%8F%97%E3%81%91%E3%82%8B%E3%82%B5%E3%82%A4%E3%83%88%E3%81%A8%E7%A2%BA%E8%AA%8D%E6%96%B9%E6%B3%95\" >\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30b5\u30a4\u30c8\u3068\u78ba\u8a8d\u65b9\u6cd5<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/wpmake.jp\/contents\/knowledge\/202610wp-news\/#%E8%A9%B2%E5%BD%93%E3%81%97%E3%81%9F%E5%A0%B4%E5%90%88%E3%81%AE%E5%BE%A9%E6%97%A7%E6%89%8B%E9%A0%86\" >\u8a72\u5f53\u3057\u305f\u5834\u5408\u306e\u5fa9\u65e7\u624b\u9806<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/wpmake.jp\/contents\/knowledge\/202610wp-news\/#WordPress_72%E3%81%AE%E3%83%99%E3%83%BC%E3%82%BF%E7%89%88%E3%81%8C%E5%85%AC%E9%96%8B%EF%BC%9A12%E6%9C%888%E6%97%A5%E3%81%AE%E6%AD%A3%E5%BC%8F%E3%83%AA%E3%83%AA%E3%83%BC%E3%82%B9%E3%81%AB%E5%90%91%E3%81%91%E3%81%9F%E4%B8%BB%E3%81%AA%E5%A4%89%E6%9B%B4%E7%82%B9\" >WordPress 7.2\u306e\u30d9\u30fc\u30bf\u7248\u304c\u516c\u958b\uff1a12\u67088\u65e5\u306e\u6b63\u5f0f\u30ea\u30ea\u30fc\u30b9\u306b\u5411\u3051\u305f\u4e3b\u306a\u5909\u66f4\u70b9<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/wpmake.jp\/contents\/knowledge\/202610wp-news\/#%E3%82%B5%E3%82%A4%E3%83%88%E9%81%8B%E7%94%A8%E8%80%85%E3%81%AB%E9%96%A2%E4%BF%82%E3%81%99%E3%82%8B%E4%B8%BB%E3%81%AA%E5%A4%89%E6%9B%B4%E7%82%B9\" >\u30b5\u30a4\u30c8\u904b\u7528\u8005\u306b\u95a2\u4fc2\u3059\u308b\u4e3b\u306a\u5909\u66f4\u70b9<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/wpmake.jp\/contents\/knowledge\/202610wp-news\/#%E3%80%90%E9%96%8B%E7%99%BA%E8%80%85%E5%90%91%E3%81%91%E3%80%91Secrets_API%E3%81%AE%E8%BF%BD%E5%8A%A0%E3%81%A8SQL%E3%83%A2%E3%83%BC%E3%83%89%E3%81%AE%E5%A4%89%E6%9B%B4\" >\u3010\u958b\u767a\u8005\u5411\u3051\u3011Secrets API\u306e\u8ffd\u52a0\u3068SQL\u30e2\u30fc\u30c9\u306e\u5909\u66f4<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/wpmake.jp\/contents\/knowledge\/202610wp-news\/#WordPress%E3%81%AE%E6%9C%80%E6%96%B0%E3%82%B7%E3%82%A7%E3%82%A2%E6%83%85%E5%A0%B1\" >WordPress\u306e\u6700\u65b0\u30b7\u30a7\u30a2\u60c5\u5831<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/wpmake.jp\/contents\/knowledge\/202610wp-news\/#2026%E5%B9%B410%E6%9C%88%E3%81%AEWordPress%E8%84%86%E5%BC%B1%E6%80%A7%E6%83%85%E5%A0%B1\" >2026\u5e7410\u6708\u306eWordPress\u8106\u5f31\u6027\u60c5\u5831<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/wpmake.jp\/contents\/knowledge\/202610wp-news\/#WordPress%E6%9C%AC%E4%BD%93%EF%BC%88%E3%82%B3%E3%82%A2%EF%BC%89%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E8%84%86%E5%BC%B1%E6%80%A7\" >WordPress\u672c\u4f53\uff08\u30b3\u30a2\uff09\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/wpmake.jp\/contents\/knowledge\/202610wp-news\/#%E3%83%97%E3%83%A9%E3%82%B0%E3%82%A4%E3%83%B3%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E8%84%86%E5%BC%B1%E6%80%A7\" >\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"PHP%E3%81%AB%E9%87%8D%E5%A4%A7%E3%81%AA%E8%84%86%E5%BC%B1%E6%80%A7%E3%80%8CPHP2Shell%E3%80%8D%EF%BC%9AWordPress%E3%82%B5%E3%82%A4%E3%83%88%E3%82%82%E6%97%A9%E6%80%A5%E3%81%ABPHP%E3%81%AE%E6%9B%B4%E6%96%B0%E3%82%92\"><\/span>PHP\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cPHP2Shell\u300d\uff1aWordPress\u30b5\u30a4\u30c8\u3082\u65e9\u6025\u306bPHP\u306e\u66f4\u65b0\u3092<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>10\u670821\u65e5\u3001PHP\u306e\u958b\u767a\u30c1\u30fc\u30e0\u306f\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\u304c\u53ef\u80fd\u306b\u306a\u308b\u91cd\u5927\u306a\u8106\u5f31\u60272\u4ef6\u3092\u4fee\u6b63\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ea\u30ea\u30fc\u30b9\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002<br \/>\n\u300cPHP2Shell\u300d\u3068\u547c\u3070\u308c\u308b\u3053\u306e\u554f\u984c\u306f\u3001WordPress\u306b\u9650\u3089\u305a\u3001PHP\u3067\u52d5\u304fWeb\u30b5\u30a4\u30c8\u5168\u822c\u306b\u5f71\u97ff\u3057\u307e\u3059\u3002<\/p>\n<p>\u53c2\u7167\u5143\uff1a<a href=\"https:\/\/www.php.net\/archive\/2026.php#2026-10-21-5\" target=\"_blank\" rel=\"noopener noreferrer\">Security advisory: Critical remote code execution vulnerabilities, update now\uff5cPHP<\/a><\/p>\n<h3><span class=\"ez-toc-section\" id=\"PHP2Shell%E3%81%A8%E3%81%AF%EF%BC%9A2%E4%BB%B6%E3%81%AE%E8%84%86%E5%BC%B1%E6%80%A7%E3%81%A8%E5%BD%B1%E9%9F%BF%E7%AF%84%E5%9B%B2\"><\/span>PHP2Shell\u3068\u306f\uff1a2\u4ef6\u306e\u8106\u5f31\u6027\u3068\u5f71\u97ff\u7bc4\u56f2<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u516c\u8868\u3055\u308c\u305f\u8106\u5f31\u6027\u306e\u6982\u8981\u306f\u6b21\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n<ul>\n<li>\u8106\u5f31\u6027\uff1aCVE-2026-109618\uff08\u30e1\u30e2\u30ea\u4e0d\u8db3\u6642\u306e\u51e6\u7406\u306b\u8d77\u56e0\u3059\u308b\u554f\u984c\uff09\u3068\u3001CVE-2026-109619\uff08\u524d\u306e\u30ea\u30af\u30a8\u30b9\u30c8\u306e\u5185\u90e8\u30c7\u30fc\u30bf\u304c\u6b8b\u308b\u554f\u984c\uff09\u306e2\u4ef6<\/li>\n<li>\u6df1\u523b\u5ea6\uff1a\u3044\u305a\u308c\u3082CVSS v4.0\u30679.2\uff08\u7dca\u6025\uff09<\/li>\n<li>\u8a8d\u8a3c\u306e\u8981\u5426\uff1a\u4e0d\u8981<\/li>\n<li>\u5f71\u97ff\u7bc4\u56f2\uff1aWeb\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u51e6\u7406\u3059\u308b\u672a\u5bfe\u7b56\u306ePHP\u74b0\u5883\uff08PHP-FPM\u3001Apache\u306emod_php\u3001php-cgi\u3001FrankenPHP\u3001LiteSpeed\uff09\u3002PHP\u306e\u958b\u767a\u30c1\u30fc\u30e0\u306f\u3001mod_php\u306e\u5371\u967a\u5ea6\u304c\u6700\u3082\u9ad8\u3044\u3068\u3057\u3066\u3044\u308b<\/li>\n<li>\u4fee\u6b63\u7248\uff1aPHP 8.5.12\u30018.4.27\u30018.3.36\u30018.2.35<\/li>\n<\/ul>\n<p>10\u670826\u65e5\u306b\u306f\u3001\u7c73CISA\u304c2\u4ef6\u3068\u3082\u300c\u5b9f\u969b\u306e\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u300d\u306e\u4e00\u89a7\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002<br \/>\nPHP 8.1\u4ee5\u524d\u306f\u30b5\u30dd\u30fc\u30c8\u304c\u7d42\u4e86\u3057\u3066\u304a\u308a\u3001\u901a\u5e38\u306e\u4fee\u6b63\u7248\u306f\u63d0\u4f9b\u3055\u308c\u307e\u305b\u3093\u3002\u4f8b\u5916\u7684\u306b\u65e7\u30d0\u30fc\u30b8\u30e7\u30f3\u5411\u3051\u306e\u6700\u5c0f\u9650\u306e\u4fee\u6b63\u30d1\u30c3\u30c1\u306f\u516c\u958b\u3055\u308c\u3066\u3044\u307e\u3059\u304c\u3001\u30b5\u30dd\u30fc\u30c8\u304c\u518d\u958b\u3055\u308c\u305f\u308f\u3051\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/p>\n<p>\u8a8d\u8a3c\u306a\u3057\u3067\u653b\u6483\u3067\u304d\u3001\u3059\u3067\u306b\u60aa\u7528\u3082\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u305f\u3081\u3001\u512a\u5148\u3057\u3066\u5bfe\u5fdc\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002PHP\u306e\u958b\u767a\u30c1\u30fc\u30e0\u306f\u8a2d\u5b9a\u5909\u66f4\u306b\u3088\u308b\u66ab\u5b9a\u5bfe\u7b56\u3082\u793a\u3057\u3066\u3044\u307e\u3059\u304c\u3001\u5b8c\u5168\u306a\u5bfe\u7b56\u306b\u306f\u66f4\u65b0\u304c\u5fc5\u8981\u3060\u3068\u660e\u8a00\u3057\u3066\u3044\u307e\u3059\u3002\u66ab\u5b9a\u5bfe\u7b56\u3092\u53d6\u308b\u5834\u5408\u3082\u3001\u4fee\u6b63\u7248\u3078\u306e\u66f4\u65b0\u3092\u9032\u3081\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<h3><span class=\"ez-toc-section\" id=\"WordPress%E3%82%B5%E3%82%A4%E3%83%88%E3%81%A7%E5%BF%85%E8%A6%81%E3%81%AA%E5%AF%BE%E5%BF%9C\"><\/span>WordPress\u30b5\u30a4\u30c8\u3067\u5fc5\u8981\u306a\u5bfe\u5fdc<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>WordPress.org\u308210\u670821\u65e5\u306b<a href=\"https:\/\/wordpress.org\/news\/2026\/10\/critical-php-security-release\/\" target=\"_blank\" rel=\"noopener noreferrer\">\u544a\u77e5\uff08Critical PHP Security Release\uff09<\/a>\u3092\u516c\u958b\u3057\u3001\u3053\u306e\u554f\u984c\u306b\u5bfe\u5fdc\u3059\u308b\u305f\u3081\u306eWordPress\u672c\u4f53\u306e\u66f4\u65b0\u306f\u4e0d\u8981\u3067\u3001\u4e88\u5b9a\u3082\u306a\u3044\u3068\u3057\u3066\u3044\u307e\u3059\u3002<br \/>\n\u5fc5\u8981\u306a\u306e\u306f\u3001\u30b5\u30fc\u30d0\u30fc\u5074\u3067\u52d5\u304fPHP\u306e\u66f4\u65b0\u3067\u3059\u3002<\/p>\n<p>\u307e\u305aPHP\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u78ba\u8a8d\u3057\u3001\u5229\u7528\u3057\u3066\u3044\u308b\u30b5\u30fc\u30d0\u30fc\u306b\u5fdc\u3058\u3066\u5bfe\u5fdc\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<ul>\n<li>\u30d0\u30fc\u30b8\u30e7\u30f3\u306e\u78ba\u8a8d\uff1a\u7ba1\u7406\u753b\u9762\u306e\u300c\u30c4\u30fc\u30eb\u300d\u2192\u300c\u30b5\u30a4\u30c8\u30d8\u30eb\u30b9\u300d\u2192\u300c\u60c5\u5831\u300d\u2192\u300c\u30b5\u30fc\u30d0\u30fc\u300d\u3067\u3001\u4f7f\u7528\u4e2d\u306ePHP\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u78ba\u8a8d\u3059\u308b<\/li>\n<li>\u30ec\u30f3\u30bf\u30eb\u30b5\u30fc\u30d0\u30fc\u3092\u5229\u7528\u3057\u3066\u3044\u308b\u5834\u5408\uff1a\u30b5\u30fc\u30d0\u30fc\u4f1a\u793e\u306e\u304a\u77e5\u3089\u305b\u3092\u78ba\u8a8d\u3057\u3001PHP\u304c\u4fee\u6b63\u7248\u306b\u66f4\u65b0\u6e08\u307f\u304b\u3001\u5229\u7528\u8005\u5074\u3067\u306e\u5207\u308a\u66ff\u3048\u304c\u5fc5\u8981\u304b\u3092\u78ba\u304b\u3081\u308b<\/li>\n<li>\u81ea\u793e\u3067\u30b5\u30fc\u30d0\u30fc\u3092\u7ba1\u7406\u3057\u3066\u3044\u308b\u5834\u5408\uff1aPHP\u3092\u4fee\u6b63\u7248\u306b\u66f4\u65b0\u3059\u308b\u3002\u82f1\u56fd\u306e\u56fd\u5bb6\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30bb\u30f3\u30bf\u30fc\uff08NCSC\uff09\u306f\u3001\u66f4\u65b0\u304c\u3067\u304d\u305a\u3001\u66ab\u5b9a\u5bfe\u7b56\u3082\u9069\u7528\u3067\u304d\u306a\u3044\u3001\u307e\u305f\u306f\u9069\u7528\u306b\u6642\u9593\u304c\u304b\u304b\u308b\u5834\u5408\u306b\u306f\u3001\u5bfe\u7b56\u304c\u6e08\u3080\u307e\u3067\u30b7\u30b9\u30c6\u30e0\u306e\u505c\u6b62\u3082\u691c\u8a0e\u3059\u308b\u3088\u3046<a href=\"https:\/\/www.ncsc.gov.uk\/news\/critical-security-issue-affecting-php\" target=\"_blank\" rel=\"noopener noreferrer\">\u547c\u3073\u304b\u3051\u3066\u3044\u308b<\/a><\/li>\n<li>PHP 8.1\u4ee5\u524d\u3092\u4f7f\u3063\u3066\u3044\u308b\u5834\u5408\uff1a\u30b5\u30dd\u30fc\u30c8\u4e2d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3078\u306e\u79fb\u884c\u3092\u6025\u3050<\/li>\n<\/ul>\n<p>\u306a\u304a\u3001<a href=\"https:\/\/www.php.net\/archive\/2026.php#2026-10-21-1\" target=\"_blank\" rel=\"noopener noreferrer\">PHP 8.2\u306e\u30b5\u30dd\u30fc\u30c8\u306f2026\u5e7412\u670831\u65e5\u3067\u7d42\u4e86<\/a>\u3057\u307e\u3059\u3002<\/p>\n<p>\u30ec\u30f3\u30bf\u30eb\u30b5\u30fc\u30d0\u30fc\u3067\u306f\u3001\u4e8b\u696d\u8005\u304cPHP\u3092\u66f4\u65b0\u3059\u308b\u5834\u5408\u3068\u3001\u5229\u7528\u8005\u304c\u7ba1\u7406\u753b\u9762\u3067\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u5207\u308a\u66ff\u3048\u308b\u5fc5\u8981\u304c\u3042\u308b\u5834\u5408\u304c\u3042\u308a\u307e\u3059\u3002\u300c\u30b5\u30fc\u30d0\u30fc\u4f1a\u793e\u304c\u5bfe\u5fdc\u3057\u3066\u3044\u308b\u306f\u305a\u300d\u3068\u8003\u3048\u305a\u3001\u304a\u77e5\u3089\u305b\u3068\u30b5\u30a4\u30c8\u30d8\u30eb\u30b9\u306e\u4e21\u65b9\u3092\u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u8868\u793a\u3055\u308c\u308b\u30d0\u30fc\u30b8\u30e7\u30f3\u3060\u3051\u3067\u5bfe\u7b56\u6e08\u307f\u304b\u5224\u65ad\u3067\u304d\u306a\u3044\u5834\u5408\u306f\u3001\u30b5\u30fc\u30d0\u30fc\u4f1a\u793e\u306b\u78ba\u8a8d\u3057\u307e\u3057\u3087\u3046\u3002<\/p>\n<p>PHP 8.1\u4ee5\u524d\u30848.2\u3092\u4f7f\u3063\u3066\u3044\u308b\u30b5\u30a4\u30c8\u306f\u3001\u5e74\u672b\u306e8.2\u306e\u30b5\u30dd\u30fc\u30c8\u7d42\u4e86\u3082\u898b\u636e\u3048\u3066\u30018.3\u4ee5\u4e0a\u3078\u306e\u79fb\u884c\u3092\u8a08\u753b\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u79fb\u884c\u524d\u306b\u306f\u3001\u691c\u8a3c\u74b0\u5883\u3067\u30c6\u30fc\u30de\u3084\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u52d5\u4f5c\u3092\u78ba\u8a8d\u3057\u3066\u304a\u304d\u307e\u3057\u3087\u3046\u3002<\/p>\n<p>\u4ee5\u4e0b\u306e\u8a18\u4e8b\u3067\u3001\u3055\u3089\u306b\u8a73\u3057\u304f\u89e3\u8aac\u3057\u3066\u3044\u307e\u3059\u306e\u3067\u3001\u3053\u3061\u3089\u3082\u3054\u53c2\u8003\u304f\u3060\u3055\u3044\u3002<br \/>\n<a href=\"https:\/\/wpmake.jp\/contents\/security\/php-vulnerability-wordpress\/\" class=\"l-contents__linkbox\">2026\u5e7410\u6708\u306ePHP\u8106\u5f31\u6027\u3067WordPress\u306b\u4f55\u304c\u8d77\u304d\u308b\uff1f\u4ed5\u7d44\u307f\u3068\u61f8\u5ff5\u70b9\u3092\u89e3\u8aac<\/a><\/p>\n<h2><span class=\"ez-toc-section\" id=\"%E3%80%8CRank_Math_SEO_PRO%E3%80%8D%E3%81%AE%E6%AD%A3%E8%A6%8F%E3%82%A2%E3%83%83%E3%83%97%E3%83%87%E3%83%BC%E3%83%88%E3%81%AB%E3%83%9E%E3%83%AB%E3%82%A6%E3%82%A7%E3%82%A2%E3%81%8C%E6%B7%B7%E5%85%A5%EF%BC%9A%E8%A9%B2%E5%BD%93%E3%82%B5%E3%82%A4%E3%83%88%E3%81%AF%E4%BE%B5%E5%AE%B3%E3%81%95%E3%82%8C%E3%81%9F%E5%89%8D%E6%8F%90%E3%81%A7%E5%AF%BE%E5%87%A6%E3%82%92\"><\/span>\u300cRank Math SEO PRO\u300d\u306e\u6b63\u898f\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306b\u30de\u30eb\u30a6\u30a7\u30a2\u304c\u6df7\u5165\uff1a\u8a72\u5f53\u30b5\u30a4\u30c8\u306f\u4fb5\u5bb3\u3055\u308c\u305f\u524d\u63d0\u3067\u5bfe\u51e6\u3092<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>10\u6708\u3001SEO\u30d7\u30e9\u30b0\u30a4\u30f3\u300cRank Math SEO\u300d\u306e\u6709\u6599\u7248\u300cRank Math SEO PRO\u300d\u3067\u3001\u914d\u5e03\u3055\u308c\u305f\u30d0\u30fc\u30b8\u30e7\u30f33.0.123\u306e\u4e00\u90e8\u306b\u30de\u30eb\u30a6\u30a7\u30a2\u304c\u6df7\u5165\u3057\u3066\u3044\u305f\u3053\u3068\u304c\u516c\u8868\u3055\u308c\u307e\u3057\u305f\u3002<br \/>\n\u958b\u767a\u5143\u304b\u3089\u6b63\u898f\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3068\u3057\u3066\u914d\u5e03\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u304c\u6539\u3056\u3093\u3055\u308c\u3066\u3044\u305f\u3001\u3044\u308f\u3086\u308b\u30b5\u30d7\u30e9\u30a4\u30c1\u30a7\u30fc\u30f3\u653b\u6483\u3067\u3059\u3002<\/p>\n<p>\u53c2\u7167\u5143\uff1a<a href=\"https:\/\/rankmath.com\/kb\/pro-3-0-123-security-incident\/\" target=\"_blank\" rel=\"noopener noreferrer\">Rank Math PRO 3.0.123 Security Incident: How to Secure Your Website\uff5cRank Math<\/a><\/p>\n<h3><span class=\"ez-toc-section\" id=\"%E5%BD%B1%E9%9F%BF%E3%82%92%E5%8F%97%E3%81%91%E3%82%8B%E3%82%B5%E3%82%A4%E3%83%88%E3%81%A8%E7%A2%BA%E8%AA%8D%E6%96%B9%E6%B3%95\"><\/span>\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30b5\u30a4\u30c8\u3068\u78ba\u8a8d\u65b9\u6cd5<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u958b\u767a\u5143\u304c\u516c\u8868\u3057\u305f\u5f71\u97ff\u7bc4\u56f2\u3068\u3001\u4fee\u6b63\u7248\u306e\u60c5\u5831\u306f\u6b21\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n<ul>\n<li>\u5bfe\u8c61\uff1a\u65e5\u672c\u6642\u9593\u306e10\u670816\u65e55\u664202\u5206\u301c16\u664212\u5206\uff08\u5354\u5b9a\u4e16\u754c\u6642\u306e10\u670815\u65e520\u664202\u5206\u301c16\u65e57\u664212\u5206\uff09\u306b\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u30fb\u66f4\u65b0\u3057\u305fRank Math SEO PRO 3.0.123<\/li>\n<li>\u5bfe\u8c61\u5916\uff1aWordPress.org\u3067\u914d\u5e03\u3055\u308c\u3066\u3044\u308b\u7121\u6599\u7248\u306eRank Math SEO<\/li>\n<li>\u4fee\u6b63\u7248\uff1a\u30de\u30eb\u30a6\u30a7\u30a2\u3092\u542b\u307e\u306a\u30443.0.124<\/li>\n<li>\u6df1\u523b\u5ea6\uff1aCVE-2026-111862\u3068\u3057\u3066\u3001CVSS v3.1\u30679.8\uff08\u7dca\u6025\uff09\u3068\u8a55\u4fa1\u3055\u308c\u3066\u3044\u308b<\/li>\n<\/ul>\n<p>\u7ba1\u7406\u753b\u9762\u306e\u300c\u30d7\u30e9\u30b0\u30a4\u30f3\u300d\u3067\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u78ba\u8a8d\u3057\u3001\u8a72\u5f53\u671f\u9593\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u30fb\u66f4\u65b0\u3057\u305f\u304b\u3001\u6709\u52b9\u5316\u3057\u305f\u304b\u3092\u8abf\u3079\u3066\u304f\u3060\u3055\u3044\u3002\u5bfe\u5fdc\u306f\u3001\u305d\u306e\u72b6\u6cc1\u306b\u3088\u3063\u3066\u7570\u306a\u308a\u307e\u3059\u3002<\/p>\n<ul>\n<li>\u8a72\u5f53\u671f\u9593\u306b\u5165\u624b\u3057\u305f3.0.123\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3001\u6709\u52b9\u5316\u3057\u305f\uff1a\u30b5\u30a4\u30c8\u304c\u4fb5\u5bb3\u3055\u308c\u305f\u3082\u306e\u3068\u3057\u3066\u6271\u3044\u3001\u5fa9\u65e7\u624b\u9806\u306b\u9032\u3080<\/li>\n<li>\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u305f\u304c\u6709\u52b9\u5316\u3057\u3066\u3044\u306a\u3044\uff1a\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u524a\u9664\u3057\u30663.0.124\u3092\u5165\u308c\u76f4\u3057\u3001\u5ff5\u306e\u305f\u3081\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30b9\u30ad\u30e3\u30f3\u3092\u884c\u3046<\/li>\n<li>\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u305f\u3060\u3051\u3067\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u3044\u306a\u3044\uff1a\u3053\u306e\u4ef6\u3060\u3051\u3067\u306f\u3001\u30b5\u30a4\u30c8\u304c\u4fb5\u5bb3\u3055\u308c\u305f\u3053\u3068\u3092\u793a\u3059\u5146\u5019\u306f\u306a\u3044\u3068\u3055\u308c\u3066\u3044\u308b<\/li>\n<\/ul>\n<p>\u306a\u304a\u3001\u958b\u767a\u5143\u306e\u5bfe\u5fdc\u306b\u4f34\u3044\u300110\u670813\u65e5\u301c16\u65e5\u306b\u767b\u9332\u3055\u308c\u305f\u7121\u6599\u7248\u5229\u7528\u8005\u306eRank Math\u30a2\u30ab\u30a6\u30f3\u30c8\u3082\u524a\u9664\u3055\u308c\u3066\u3044\u307e\u3059\u3002<br \/>\n\u8a72\u5f53\u3059\u308b\u5834\u5408\u306f\u3001\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4f5c\u308a\u76f4\u3057\u3066\u30b5\u30a4\u30c8\u3068\u518d\u63a5\u7d9a\u3059\u308b\u307e\u3067\u3001Search Console\u306e\u30c7\u30fc\u30bf\u8868\u793a\u306a\u3069\u306e\u9023\u643a\u6a5f\u80fd\u304c\u4f7f\u3048\u307e\u305b\u3093\u3002<\/p>\n<p>\u81ea\u52d5\u66f4\u65b0\u3092\u6709\u52b9\u306b\u3057\u3066\u3044\u308b\u30b5\u30a4\u30c8\u3067\u306f\u3001\u62c5\u5f53\u8005\u304c\u6c17\u3065\u304b\u306a\u3044\u3046\u3061\u306b\u3001\u8a72\u5f53\u671f\u9593\u4e2d\u306e3.0.123\u304c\u9069\u7528\u3055\u308c\u3066\u3044\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u3059\u3067\u306b\u5225\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3078\u66f4\u65b0\u3057\u3066\u3044\u308b\u5834\u5408\u3082\u3001\u5f53\u6642\u306e\u66f4\u65b0\u5c65\u6b74\u3092\u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u64cd\u4f5c\u5c65\u6b74\u3092\u8a18\u9332\u3059\u308b\u30d7\u30e9\u30b0\u30a4\u30f3\u3084\u30b5\u30fc\u30d0\u30fc\u306e\u30ed\u30b0\u304c\u3042\u308c\u3070\u3001\u66f4\u65b0\u65e5\u6642\u3092\u8abf\u3079\u308b\u624b\u304c\u304b\u308a\u306b\u306a\u308a\u307e\u3059\u3002\u5224\u65ad\u3067\u304d\u306a\u3044\u5834\u5408\u306f\u958b\u767a\u5143\u306e\u30b5\u30dd\u30fc\u30c8\u306b\u76f8\u8ac7\u3057\u3001\u5f71\u97ff\u3092\u53d7\u3051\u3066\u3044\u306a\u3044\u3068\u78ba\u8a8d\u3067\u304d\u308b\u307e\u3067\u306f\u3001\u4fb5\u5bb3\u306e\u53ef\u80fd\u6027\u3092\u524d\u63d0\u306b\u5bfe\u5fdc\u3057\u307e\u3057\u3087\u3046\u3002<\/p>\n<h3><span class=\"ez-toc-section\" id=\"%E8%A9%B2%E5%BD%93%E3%81%97%E3%81%9F%E5%A0%B4%E5%90%88%E3%81%AE%E5%BE%A9%E6%97%A7%E6%89%8B%E9%A0%86\"><\/span>\u8a72\u5f53\u3057\u305f\u5834\u5408\u306e\u5fa9\u65e7\u624b\u9806<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u958b\u767a\u5143\u306f\u3001\u554f\u984c\u306e\u3042\u308b\u30d0\u30fc\u30b8\u30e7\u30f3\u304c\u914d\u5e03\u3055\u308c\u308b\u524d\u306b\u53d6\u5f97\u3057\u305f\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304b\u3089\u306e\u5fa9\u5143\u3092\u63a8\u5968\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<ul>\n<li>\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304b\u3089\u306e\u5fa9\u5143\uff1a\u65e5\u672c\u6642\u9593\u306e10\u670816\u65e55\u664202\u5206\u3088\u308a\u524d\u306b\u53d6\u5f97\u3057\u305f\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3067\u3001\u30d5\u30a1\u30a4\u30eb\u3068\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3092\u5fa9\u5143\u3059\u308b<\/li>\n<li>\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30b9\u30ad\u30e3\u30f3\uff1aWordfence\u3084Sucuri\u306a\u3069\u306e\u30c4\u30fc\u30eb\u3067\u3001\u4e0d\u6b63\u306a\u30d5\u30a1\u30a4\u30eb\u304c\u6b8b\u3063\u3066\u3044\u306a\u3044\u304b\u3092\u78ba\u8a8d\u3059\u308b<\/li>\n<li>\u30d1\u30b9\u30ef\u30fc\u30c9\u3068\u8a8d\u8a3c\u60c5\u5831\u306e\u5909\u66f4\uff1aWordPress\u306e\u30a2\u30ab\u30a6\u30f3\u30c8\u3001\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u8a8d\u8a3c\u60c5\u5831\u3001wp-config.php\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ad\u30fc\u3001\u6c7a\u6e08\u3084\u30e1\u30fc\u30eb\u9001\u4fe1\u306a\u3069\u306eAPI\u30ad\u30fc\u3001\u30b5\u30fc\u30d0\u30fc\u306eFTP\u30fbSSH\u306e\u8a8d\u8a3c\u60c5\u5831\u306a\u3069\u3001\u6f0f\u3048\u3044\u3057\u305f\u53ef\u80fd\u6027\u306e\u3042\u308b\u60c5\u5831\u3092\u3059\u3079\u3066\u5909\u66f4\u3059\u308b<\/li>\n<li>\u4fee\u6b63\u7248\u306e\u5c0e\u5165\uff1arankmath.com\u306b\u76f4\u63a5\u30a2\u30af\u30bb\u30b9\u3057\u3066\u30ed\u30b0\u30a4\u30f3\u3057\u30013.0.124\u3092\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u3066\u5165\u308c\u76f4\u3059<\/li>\n<\/ul>\n<p>\u5fa9\u5143\u3067\u304d\u308b\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304c\u306a\u3044\u5834\u5408\u306f\u3001\u624b\u4f5c\u696d\u3067\u30de\u30eb\u30a6\u30a7\u30a2\u3092\u99c6\u9664\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<br \/>\n\u30de\u30eb\u30a6\u30a7\u30a2\u306f\u30da\u30fc\u30b8\u304c\u95b2\u89a7\u3055\u308c\u308b\u305f\u3073\u306b\u30d0\u30c3\u30af\u30c9\u30a2\u3092\u4f5c\u308a\u76f4\u3059\u305f\u3081\u3001\u30d7\u30e9\u30b0\u30a4\u30f3\u3092\u505c\u6b62\u3059\u308b\u3060\u3051\u3067\u306f\u4e0d\u5341\u5206\u3067\u3059\u3002\u518d\u751f\u6210\u306e\u4ed5\u7d44\u307f\u3092\u6b62\u3081\u3066\u304b\u3089\u4e0d\u6b63\u306a\u30d5\u30a1\u30a4\u30eb\u3092\u524a\u9664\u3059\u308b\u306a\u3069\u3001\u958b\u767a\u5143\u304c\u793a\u3059\u9806\u5e8f\u306b\u6cbf\u3063\u3066\u4f5c\u696d\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<p>\u8eab\u306b\u899a\u3048\u306e\u306a\u3044\u7ba1\u7406\u8005\u30a2\u30ab\u30a6\u30f3\u30c8\uff08\u300cwpsupport_\u300d\u3067\u59cb\u307e\u308b\u30e6\u30fc\u30b6\u30fc\u540d\u306a\u3069\uff09\u3084\u3001\u6b63\u898f\u306eWordPress\u306b\u306f\u542b\u307e\u308c\u306a\u3044\u30d5\u30a1\u30a4\u30eb\uff08wp-includes\/class-wp-cache-util.php\uff09\u306f\u3001\u611f\u67d3\u3092\u8abf\u3079\u308b\u624b\u304c\u304b\u308a\u306b\u306a\u308a\u307e\u3059\u3002<br \/>\n\u307e\u305f\u3001\u958b\u767a\u5143\u306f\u30ed\u30b0\u30a4\u30f3\u3084\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u306e\u30ea\u30f3\u30af\u3092\u30e1\u30fc\u30eb\u3067\u9001\u308b\u3053\u3068\u306f\u306a\u3044\u3068\u3057\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u4ef6\u306b\u4fbf\u4e57\u3057\u305f\u30e1\u30fc\u30eb\u306b\u3082\u6ce8\u610f\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<p>\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304b\u3089\u5fa9\u5143\u3057\u305f\u5834\u5408\u3082\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u3084\u8a8d\u8a3c\u60c5\u5831\u306e\u5909\u66f4\u306f\u5fc5\u9808\u3068\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u30b5\u30a4\u30c8\u5185\u306b\u4fdd\u5b58\u3055\u308c\u3001\u653b\u6483\u8005\u306b\u8aad\u307f\u53d6\u3089\u308c\u305f\u53ef\u80fd\u6027\u306e\u3042\u308b\u8a8d\u8a3c\u60c5\u5831\u306f\u3001\u5916\u90e8\u30b5\u30fc\u30d3\u30b9\u306eAPI\u30ad\u30fc\u3082\u542b\u3081\u3066\u5909\u66f4\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u624b\u4f5c\u696d\u3067\u306e\u99c6\u9664\u306b\u306fWordPress\u3084\u30b5\u30fc\u30d0\u30fc\u306e\u77e5\u8b58\u304c\u5fc5\u8981\u306a\u305f\u3081\u3001\u81ea\u793e\u3067\u306e\u5bfe\u5fdc\u304c\u96e3\u3057\u3044\u5834\u5408\u306f\u3001\u30b5\u30fc\u30d0\u30fc\u4f1a\u793e\u3084\u5c02\u9580\u5bb6\u306b\u4f9d\u983c\u3057\u307e\u3057\u3087\u3046\u3002<\/p>\n<h2><span class=\"ez-toc-section\" id=\"WordPress_72%E3%81%AE%E3%83%99%E3%83%BC%E3%82%BF%E7%89%88%E3%81%8C%E5%85%AC%E9%96%8B%EF%BC%9A12%E6%9C%888%E6%97%A5%E3%81%AE%E6%AD%A3%E5%BC%8F%E3%83%AA%E3%83%AA%E3%83%BC%E3%82%B9%E3%81%AB%E5%90%91%E3%81%91%E3%81%9F%E4%B8%BB%E3%81%AA%E5%A4%89%E6%9B%B4%E7%82%B9\"><\/span>WordPress 7.2\u306e\u30d9\u30fc\u30bf\u7248\u304c\u516c\u958b\uff1a12\u67088\u65e5\u306e\u6b63\u5f0f\u30ea\u30ea\u30fc\u30b9\u306b\u5411\u3051\u305f\u4e3b\u306a\u5909\u66f4\u70b9<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>12\u67088\u65e5\u306b\u6b63\u5f0f\u30ea\u30ea\u30fc\u30b9\u3092\u4e88\u5b9a\u3057\u3066\u3044\u308bWordPress 7.2\u306f\u300110\u670820\u65e5\u306b\u30d9\u30fc\u30bf1\u300127\u65e5\u306b\u30d9\u30fc\u30bf2\u300128\u65e5\u306b\u30d9\u30fc\u30bf3\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002<br \/>\n<a href=\"https:\/\/make.wordpress.org\/core\/2026\/10\/06\/wordpress-7-2-release-party-schedule\/\" target=\"_blank\" rel=\"noopener noreferrer\">\u958b\u767a\u30b9\u30b1\u30b8\u30e5\u30fc\u30eb<\/a>\u3067\u306f\u300111\u670817\u65e5\u306b\u30ea\u30ea\u30fc\u30b9\u5019\u88dc\u7248\uff08RC1\uff09\u304c\u516c\u958b\u3055\u308c\u308b\u4e88\u5b9a\u3067\u3059\u3002<\/p>\n<p>\u306a\u304a\u300110\u6708\u306b\u306f\u73fe\u884c\u7248\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ea\u30ea\u30fc\u30b9\u3068\u3057\u3066\u3001<a href=\"https:\/\/wordpress.org\/news\/2026\/10\/wordpress-7-1-3-maintenance-and-security-release\/\" target=\"_blank\" rel=\"noopener noreferrer\">WordPress 7.1.3<\/a>\u3068<a href=\"https:\/\/wordpress.org\/news\/2026\/10\/wordpress-7-1-4\/\" target=\"_blank\" rel=\"noopener noreferrer\">7.1.4<\/a>\u3082\u516c\u958b\u3055\u308c\u3066\u3044\u307e\u3059\u30027.1.4\u3067\u4fee\u6b63\u3055\u308c\u305f\u66f4\u65b0\u51e6\u7406\u306e\u8106\u5f31\u6027\uff08CVE-2026-119977\uff09\u306f\u3001\u3059\u3067\u306b\u653b\u6483\u3078\u306e\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u672a\u5bfe\u5fdc\u306e\u5834\u5408\u306f\u30017.2\u3092\u5f85\u305f\u305a\u306b7.1.4\u4ee5\u964d\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<h3><span class=\"ez-toc-section\" id=\"%E3%82%B5%E3%82%A4%E3%83%88%E9%81%8B%E7%94%A8%E8%80%85%E3%81%AB%E9%96%A2%E4%BF%82%E3%81%99%E3%82%8B%E4%B8%BB%E3%81%AA%E5%A4%89%E6%9B%B4%E7%82%B9\"><\/span>\u30b5\u30a4\u30c8\u904b\u7528\u8005\u306b\u95a2\u4fc2\u3059\u308b\u4e3b\u306a\u5909\u66f4\u70b9<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><a href=\"https:\/\/wordpress.org\/news\/2026\/10\/wordpress-7-2-beta-1-is-ready-for-download-and-testing\/\" target=\"_blank\" rel=\"noopener noreferrer\">\u30d9\u30fc\u30bf1\u306e\u544a\u77e5<\/a>\u3067\u7d39\u4ecb\u3055\u308c\u3066\u3044\u308b\u5909\u66f4\u306e\u3046\u3061\u3001\u30b5\u30a4\u30c8\u904b\u7528\u8005\u306b\u95a2\u4fc2\u304c\u6df1\u3044\u3082\u306e\u3092\u7d39\u4ecb\u3057\u307e\u3059\u3002<\/p>\n<ul>\n<li>\u30ec\u30b9\u30dd\u30f3\u30b7\u30d6\u8a2d\u5b9a\u306e\u62e1\u5f35\uff1a\u30ae\u30e3\u30e9\u30ea\u30fc\u306e\u5217\u6570\u3084\u753b\u50cf\u306e\u5207\u308a\u629c\u304d\u30fb\u7e26\u6a2a\u6bd4\u306a\u3069\u3001\u3088\u308a\u591a\u304f\u306e\u30d6\u30ed\u30c3\u30af\u3084\u8a2d\u5b9a\u3067\u3001\u753b\u9762\u5e45\u306b\u5fdc\u3058\u305f\u30b9\u30bf\u30a4\u30eb\u3092\u6307\u5b9a\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308b<\/li>\n<li>\u6587\u5b57\u306e\u5f71\uff1a\u30d6\u30ed\u30c3\u30af\u306e\u8a2d\u5b9a\u304b\u3089\u6587\u5b57\u306b\u5f71\u3092\u4ed8\u3051\u3089\u308c\u308b\u3088\u3046\u306b\u306a\u308b\u3002\u30c6\u30fc\u30de\u5074\uff08theme.json\uff09\u3067\u30d7\u30ea\u30bb\u30c3\u30c8\u3092\u5b9a\u7fa9\u3059\u308b\u3053\u3068\u3082\u3067\u304d\u308b<\/li>\n<li>\u30e1\u30e2\u6a5f\u80fd\u306e\u6539\u5584\uff1a\u7d75\u6587\u5b57\u3067\u306e\u30ea\u30a2\u30af\u30b7\u30e7\u30f3\u306b\u5bfe\u5fdc\u3057\u3001\u30e1\u30e2\u3068\u30d6\u30ed\u30c3\u30af\u306e\u8a2d\u5b9a\u3092\u540c\u6642\u306b\u958b\u3044\u305f\u307e\u307e\u7de8\u96c6\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308b<\/li>\n<li>\u753b\u50cf\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u306e\u52b9\u7387\u5316\uff1a\u30e1\u30c7\u30a3\u30a2\u30e9\u30a4\u30d6\u30e9\u30ea\u3067\u3082\u3001\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u524d\u306b\u30d6\u30e9\u30a6\u30b6\u5074\u3067\u753b\u50cf\u306e\u7e2e\u5c0f\u30fb\u5727\u7e2e\u30fb\u5f62\u5f0f\u5909\u63db\u3092\u884c\u3048\u308b\u3088\u3046\u306b\u306a\u308b<\/li>\n<li>\u7ba1\u7406\u753b\u9762\u306e\u9ad8\u901f\u5316\uff1a\u30b9\u30af\u30ea\u30d7\u30c8\u3084\u30b9\u30bf\u30a4\u30eb\u306e\u8aad\u307f\u8fbc\u307f\u65b9\u6cd5\u304c\u898b\u76f4\u3055\u308c\u3001\u6b21\u306b\u958b\u304f\u3068\u4e88\u6e2c\u3055\u308c\u308b\u753b\u9762\u306e\u30ea\u30bd\u30fc\u30b9\u3092\u5148\u8aad\u307f\u3059\u308b\u4ed5\u7d44\u307f\u304c\u52a0\u308f\u308b<\/li>\n<\/ul>\n<p>\u3053\u306e\u307b\u304b\u3001\u904e\u53bb\u306e\u540c\u3058\u65e5\u4ed8\u306b\u516c\u958b\u3057\u305f\u6295\u7a3f\u3092\u8868\u793a\u3059\u308b\u30c0\u30c3\u30b7\u30e5\u30dc\u30fc\u30c9\u30a6\u30a3\u30b8\u30a7\u30c3\u30c8\u300cOn This Day\u300d\u306e\u8ffd\u52a0\u3084\u3001\u30ca\u30d3\u30b2\u30fc\u30b7\u30e7\u30f3\uff08\u30e1\u30cb\u30e5\u30fc\uff09\u3092\u30b5\u30a4\u30c8\u30a8\u30c7\u30a3\u30bf\u30fc\u306e\u30b5\u30a4\u30c9\u30d0\u30fc\u304b\u3089\u76f4\u63a5\u7de8\u96c6\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308b\u6539\u5584\u3082\u542b\u307e\u308c\u307e\u3059\u3002<\/p>\n<p>\u516c\u5f0f\u306f\u3001\u30d9\u30fc\u30bf\u7248\u3092\u672c\u756a\u30b5\u30a4\u30c8\u3067\u4f7f\u7528\u3057\u306a\u3044\u3088\u3046\u547c\u3073\u304b\u3051\u3066\u3044\u307e\u3059\u3002\u65b0\u6a5f\u80fd\u3084\u30c6\u30fc\u30de\u30fb\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u52d5\u4f5c\u306f\u3001\u691c\u8a3c\u74b0\u5883\u3067\u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u7279\u306b\u3001\u753b\u50cf\u6700\u9069\u5316\u30d7\u30e9\u30b0\u30a4\u30f3\u3092\u4f7f\u3063\u3066\u3044\u308b\u30b5\u30a4\u30c8\u3084\u3001\u30b5\u30fc\u30d0\u30fc\u5074\u306e\u753b\u50cf\u51e6\u7406\u3092\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u3057\u3066\u3044\u308b\u30b5\u30a4\u30c8\u3067\u306f\u3001\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u5f8c\u306e\u753b\u8cea\u3084\u30d5\u30a1\u30a4\u30eb\u5f62\u5f0f\u3078\u306e\u5f71\u97ff\u3092\u78ba\u8a8d\u3057\u3066\u304a\u304d\u307e\u3057\u3087\u3046\u3002<\/p>\n<h3><span class=\"ez-toc-section\" id=\"%E3%80%90%E9%96%8B%E7%99%BA%E8%80%85%E5%90%91%E3%81%91%E3%80%91Secrets_API%E3%81%AE%E8%BF%BD%E5%8A%A0%E3%81%A8SQL%E3%83%A2%E3%83%BC%E3%83%89%E3%81%AE%E5%A4%89%E6%9B%B4\"><\/span>\u3010\u958b\u767a\u8005\u5411\u3051\u3011Secrets API\u306e\u8ffd\u52a0\u3068SQL\u30e2\u30fc\u30c9\u306e\u5909\u66f4<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u958b\u767a\u8005\u5411\u3051\u306b\u306f\u3001API\u3084\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u63a5\u7d9a\u306b\u95a2\u3059\u308b\u6b21\u306e\u5909\u66f4\u304c\u4e88\u5b9a\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<ul>\n<li>Secrets API\uff1aAPI\u30ad\u30fc\u306a\u3069\u306e\u8a8d\u8a3c\u60c5\u5831\u3092\u6697\u53f7\u5316\u3057\u3066\u4fdd\u5b58\u3059\u308b\u305f\u3081\u306e\u6a19\u6e96API\u304c\u8ffd\u52a0\u3055\u308c\u308b\uff08<a href=\"https:\/\/core.trac.wordpress.org\/ticket\/66187\" target=\"_blank\" rel=\"noopener noreferrer\">Trac #66187<\/a>\uff09<\/li>\n<li>Abilities API\u306e\u62e1\u5f35\uff1aWordPress\u306e\u30c7\u30fc\u30bf\u3092\u53d6\u5f97\u30fb\u691c\u7d22\u3059\u308b\u6a5f\u80fd\u304c\u52a0\u308f\u308a\u3001\u5916\u90e8\u30c4\u30fc\u30eb\u3084AI\u3068\u306e\u9023\u643a\u306b\u6d3b\u7528\u3067\u304d\u308b<\/li>\n<li>SQL\u30e2\u30fc\u30c9\u306e\u5909\u66f4\uff1aWordPress\u304b\u3089\u306e\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u63a5\u7d9a\u3067\u306f\u3001SQL\u30e2\u30fc\u30c9\u300cNO_BACKSLASH_ESCAPES\u300d\u304c\u65e2\u5b9a\u3067\u7121\u52b9\u306b\u306a\u308b\uff08<a href=\"https:\/\/make.wordpress.org\/core\/2026\/10\/09\/no_backslash_escapes-sql-mode-is-now-turned-off-by-default-in-wordpress-7-2\/\" target=\"_blank\" rel=\"noopener noreferrer\">\u958b\u767a\u8005\u5411\u3051\u306e\u89e3\u8aac<\/a>\uff09\u3002\u5fc5\u8981\u306a\u5834\u5408\u306f\u3001db.php\u30c9\u30ed\u30c3\u30d7\u30a4\u30f3\u3067\u30d5\u30a3\u30eb\u30bf\u30fc\u3092\u4f7f\u3044\u3001\u6709\u52b9\u306a\u72b6\u614b\u3092\u7dad\u6301\u3067\u304d\u308b<\/li>\n<\/ul>\n<p>SQL\u30e2\u30fc\u30c9\u306e\u5909\u66f4\u306b\u3064\u3044\u3066\u3001\u516c\u5f0f\u306f\u3001\u307b\u3068\u3093\u3069\u306e\u30b5\u30a4\u30c8\u3067\u306f\u9055\u3044\u306b\u6c17\u3065\u304b\u306a\u3044\u3068\u8aac\u660e\u3057\u3066\u3044\u307e\u3059\u3002<br \/>\n\u307e\u305f\u3001\u5916\u90e8\u30b5\u30fc\u30d3\u30b9\u306eAPI\u30ad\u30fc\u306a\u3069\u3092\u72ec\u81ea\u306e\u65b9\u6cd5\u3067\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306b\u4fdd\u5b58\u3059\u308b\u30d7\u30e9\u30b0\u30a4\u30f3\u3092\u958b\u767a\u30fb\u4fdd\u5b88\u3057\u3066\u3044\u308b\u5834\u5408\u306f\u3001Secrets API\u306e\u4ed5\u69d8\u3092\u78ba\u8a8d\u3057\u30017.2\u306e\u6b63\u5f0f\u30ea\u30ea\u30fc\u30b9\u306b\u5408\u308f\u305b\u3066\u79fb\u884c\u3092\u691c\u8a0e\u3059\u308b\u3068\u3088\u3044\u3067\u3057\u3087\u3046\u3002<\/p>\n<h2><span class=\"ez-toc-section\" id=\"WordPress%E3%81%AE%E6%9C%80%E6%96%B0%E3%82%B7%E3%82%A7%E3%82%A2%E6%83%85%E5%A0%B1\"><\/span>WordPress\u306e\u6700\u65b0\u30b7\u30a7\u30a2\u60c5\u5831<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>W3Techs\u306b\u3088\u308bWordPress\u306e\u30b7\u30a7\u30a2\u306f\u30012026\u5e7410\u6708\u6642\u70b9\u3067\u6b21\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n<table>\n<tbody>\n<tr>\n<th>CMS\u5185\u306eWordPress\u30b7\u30a7\u30a2<\/th>\n<td>58.2%<\/td>\n<\/tr>\n<tr>\n<th>\u5168Web\u30b5\u30a4\u30c8\u4e2d\u306eWordPress\u30b7\u30a7\u30a2<\/th>\n<td>39.5%<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u53c2\u7167\u5143\uff1a<a href=\"https:\/\/w3techs.com\/technologies\/overview\/content_management\" target=\"_blank\" rel=\"noopener noreferrer\">Usage statistics and market shares of content management systems\uff5cW3Techs<\/a><\/p>\n<h2><span class=\"ez-toc-section\" id=\"2026%E5%B9%B410%E6%9C%88%E3%81%AEWordPress%E8%84%86%E5%BC%B1%E6%80%A7%E6%83%85%E5%A0%B1\"><\/span>2026\u5e7410\u6708\u306eWordPress\u8106\u5f31\u6027\u60c5\u5831<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\u3053\u3053\u304b\u3089\u306f\u30012026\u5e7410\u6708\u306b\u516c\u8868\u3055\u308c\u305fWordPress\u672c\u4f53\uff08\u30b3\u30a2\uff09\u30fb\u30c6\u30fc\u30de\u30fb\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u4e3b\u306a\u8106\u5f31\u6027\u3092\u7d39\u4ecb\u3057\u307e\u3059\u3002<\/p>\n<p>\u4f7f\u7528\u4e2d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u5834\u5408\u306f\u3001\u4fee\u6b63\u7248\u3078\u306e\u66f4\u65b0\u3001\u4e0d\u8981\u306a\u30c6\u30fc\u30de\u30fb\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u524a\u9664\u3001\u4ee3\u66ff\u88fd\u54c1\u3078\u306e\u5207\u308a\u66ff\u3048\u306a\u3069\u3001\u72b6\u6cc1\u306b\u5fdc\u3058\u305f\u5bfe\u7b56\u3092\u901f\u3084\u304b\u306b\u884c\u3063\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<p>\u5177\u4f53\u7684\u306a\u5bfe\u5fdc\u65b9\u6cd5\u306f\u3001\u305d\u308c\u305e\u308c\u306e\u516c\u5f0f\u30b5\u30a4\u30c8\u3084\u958b\u767a\u5143\u306e\u544a\u77e5\u3067\u78ba\u8a8d\u3057\u307e\u3057\u3087\u3046\u3002\u81ea\u793e\u3067\u306e\u5bfe\u5fdc\u304c\u96e3\u3057\u3044\u5834\u5408\u306f\u3001<a href=\"https:\/\/wpmake.jp\/service\/support\/wp-support\/\" target=\"_blank\" rel=\"noopener\">WordPress\u306e\u30d7\u30ed\u3078\u306e\u4f9d\u983c<\/a>\u3082\u3054\u691c\u8a0e\u304f\u3060\u3055\u3044\u3002<\/p>\n<p>\u63b2\u8f09\u5bfe\u8c61\u306f\u3001\u6df1\u523b\u5ea6\u304c\u300c\u7dca\u6025\u300d\u300c\u9ad8\u300d\u3067\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u657010\u4e07\u4ee5\u4e0a\u306e\u3082\u306e\u3001\u307e\u305f\u306f\u6df1\u523b\u5ea6\u3092\u554f\u308f\u305a\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u657050\u4e07\u4ee5\u4e0a\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u30fb\u30c6\u30fc\u30de\u306e\u8106\u5f31\u6027\u3067\u3059\u3002WordPress\u672c\u4f53\u306b\u3064\u3044\u3066\u306f\u3001CVE\u756a\u53f7\u304c\u4ed8\u3044\u305f\u8106\u5f31\u6027\u3092\u3059\u3079\u3066\u63b2\u8f09\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<style>.l-contents__article table.wpnews-vuln-table{max-height:80vh;overflow:auto;border-collapse:separate;border-spacing:0}.l-contents__article table.wpnews-vuln-table th,.l-contents__article table.wpnews-vuln-table td{border-right:0}.l-contents__article table.wpnews-vuln-table tr:first-child>*{position:sticky;top:0;z-index:2;border-top:0;background:#edf7fe;box-shadow:inset 0 -1px 0 #ccc}.l-contents__article table.wpnews-vuln-table tr>:first-child{position:sticky;left:0;z-index:1;border-left:0;background:#fff;box-shadow:inset -1px 0 0 #ccc;white-space:normal;overflow-wrap:anywhere;width:10em;min-width:10em;max-width:10em}.l-contents__article table.wpnews-vuln-table tr:first-child>:first-child{z-index:3;background:#edf7fe;box-shadow:inset -1px -1px 0 #ccc}.l-contents__article table.wpnews-vuln-table tr>:nth-child(2){border-left:0}.l-contents__article table.wpnews-vuln-table tr>:nth-child(4){white-space:normal;min-width:18em;max-width:18em}<\/style>\n<h3><span class=\"ez-toc-section\" id=\"WordPress%E6%9C%AC%E4%BD%93%EF%BC%88%E3%82%B3%E3%82%A2%EF%BC%89%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E8%84%86%E5%BC%B1%E6%80%A7\"><\/span>WordPress\u672c\u4f53\uff08\u30b3\u30a2\uff09\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<table class=\"wpnews-vuln-table\">\n<tbody>\n<tr>\n<th>\u5bfe\u8c61<\/th>\n<th>\u6df1\u523b\u5ea6<\/th>\n<th>\u8106\u5f31\u6027\u30ab\u30c6\u30b4\u30ea<\/th>\n<th>\u8106\u5f31\u6027\u8a73\u7d30<\/th>\n<th>\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30d0\u30fc\u30b8\u30e7\u30f3<\/th>\n<th>\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6570<\/th>\n<th>CVE<\/th>\n<th>\u5099\u8003<\/th>\n<\/tr>\n<tr>\n<td>WordPress<\/td>\n<td>\u9ad8<\/td>\n<td>\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\uff08\u672c\u4f53\u306e\u66f4\u65b0\u4e2d\u306b\u4f5c\u3089\u308c\u308b\u63a8\u6e2c\u53ef\u80fd\u306a\u4e00\u6642\u30d5\u30a1\u30a4\u30eb\u7d4c\u7531\uff09\u3002\u7c73CISA\u304c\u60aa\u7528\u3092\u78ba\u8a8d\u6e08\u307f\uff082026\u5e7411\u67083\u65e5\uff09<\/td>\n<td>\u2264 7.1.3<\/td>\n<td>&#8211;<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-119977\" target=\"_blank\" rel=\"noopener\">CVE-2026-119977<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3><span class=\"ez-toc-section\" id=\"%E3%83%97%E3%83%A9%E3%82%B0%E3%82%A4%E3%83%B3%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E8%84%86%E5%BC%B1%E6%80%A7\"><\/span>\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<table class=\"wpnews-vuln-table\">\n<tbody>\n<tr>\n<th>\u30d7\u30e9\u30b0\u30a4\u30f3\u540d<\/th>\n<th>\u6df1\u523b\u5ea6<\/th>\n<th>\u8106\u5f31\u6027\u30ab\u30c6\u30b4\u30ea<\/th>\n<th>\u8106\u5f31\u6027\u8a73\u7d30<\/th>\n<th>\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30d0\u30fc\u30b8\u30e7\u30f3<\/th>\n<th>\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6570<\/th>\n<th>CVE<\/th>\n<th>\u5099\u8003<\/th>\n<\/tr>\n<tr>\n<td>Unlimited Elements for Elementor<\/td>\n<td>\u7dca\u6025<\/td>\n<td>SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u2264 2.0.20<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-103355\" target=\"_blank\" rel=\"noopener\">CVE-2026-103355<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Popup Builder<\/td>\n<td>\u7dca\u6025<\/td>\n<td>\u8a8d\u53ef\u306e\u4e0d\u5099<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u8a8d\u53ef\u306e\u30d0\u30a4\u30d1\u30b9\u3067\u3001\u516c\u958b\u4e2d\u306e\u30dd\u30c3\u30d7\u30a2\u30c3\u30d7\u304c\u3059\u3079\u3066\u30b4\u30df\u7bb1\u306b\u79fb\u3055\u308c\u308b<\/td>\n<td>\u2264 4.4.5<\/td>\n<td>200,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-89270\" target=\"_blank\" rel=\"noopener\">CVE-2026-89270<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Appointment Booking Plugin<\/td>\n<td>\u7dca\u6025<\/td>\n<td>SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\uff08&#x27;booking[service_id]&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\u7d4c\u7531\uff09<\/td>\n<td>\u2264 5.7.2<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-96662\" target=\"_blank\" rel=\"noopener\">CVE-2026-96662<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>LiteSpeed Cache<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08HTML\u5727\u7e2e\u51e6\u7406\u306e\u63a8\u6e2c\u53ef\u80fd\u306a\u30d7\u30ec\u30fc\u30b9\u30db\u30eb\u30c0\u30fc\uff08md5(REQUEST_TIME)\u30682\u6bb5\u968e\u306e str_replace\uff09\u7d4c\u7531\uff09<\/td>\n<td>\u2264 7.9.1<\/td>\n<td>7,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-116763\" target=\"_blank\" rel=\"noopener\">CVE-2026-116763<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>LiteSpeed Cache<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>LiteSpeed Cache &lt; 7.9.2<\/td>\n<td>7,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-113500\" target=\"_blank\" rel=\"noopener\">CVE-2026-113500<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>LiteSpeed Cache<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u60c5\u5831\u9732\u51fa<\/td>\n<td>\u2264 7.9<\/td>\n<td>7,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-114190\" target=\"_blank\" rel=\"noopener\">CVE-2026-114190<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>WooCommerce<\/td>\n<td>\u9ad8<\/td>\n<td>\u6a29\u9650\u6607\u683c<\/td>\n<td>\u30b7\u30e7\u30c3\u30d7\u30de\u30cd\u30fc\u30b8\u30e3\u30fc\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u6a29\u9650\u6607\u683c<\/td>\n<td>WooCommerce 9.8.0 &#8211; 11.1.2<\/td>\n<td>7,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-106608\" target=\"_blank\" rel=\"noopener\">CVE-2026-106608<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>All in One SEO<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u691c\u7d22\u30d1\u30e9\u30e1\u30fc\u30bf&#x27;s&#x27;\u304b\u3089\u306e\u6a5f\u5bc6\u60c5\u5831\u306e\u958b\u793a<\/td>\n<td>\u2264 5.0.3<\/td>\n<td>2,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-109367\" target=\"_blank\" rel=\"noopener\">CVE-2026-109367<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>All in One SEO<\/td>\n<td>\u9ad8<\/td>\n<td>\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08\u691c\u7d22\u30d1\u30e9\u30e1\u30fc\u30bf&#x27;s&#x27;\u7d4c\u7531\uff09<\/td>\n<td>\u2264 5.0.2<\/td>\n<td>2,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-100152\" target=\"_blank\" rel=\"noopener\">CVE-2026-100152<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>All in One SEO<\/td>\n<td>\u9ad8<\/td>\n<td>\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n<td>\u2264 5.0.2.0<\/td>\n<td>2,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-19856\" target=\"_blank\" rel=\"noopener\">CVE-2026-19856<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Complianz GDPR\/CCPA Cookie Consent Banner<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08yotu-wp \u306e Cookie \u30d6\u30ed\u30c3\u30af\u7528\u30d5\u30a3\u30eb\u30bf\u30fc\u3092\u60aa\u7528\u3057\u305f\u30b3\u30e1\u30f3\u30c8\u672c\u6587\u7d4c\u7531\uff09<\/td>\n<td>\u2264 7.5.5<\/td>\n<td>1,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-97339\" target=\"_blank\" rel=\"noopener\">CVE-2026-97339<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Essential Addons for Elementor<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u60c5\u5831\u9732\u51fa<\/td>\n<td>Essential Addons for Elementor &lt; 6.8.7<\/td>\n<td>1,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-110509\" target=\"_blank\" rel=\"noopener\">CVE-2026-110509<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>W3 Total Cache<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 2.10.7<\/td>\n<td>900,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-114178\" target=\"_blank\" rel=\"noopener\">CVE-2026-114178<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>W3 Total Cache<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u30b3\u30e1\u30f3\u30c8\u672c\u6587\u7d4c\u7531\uff09<\/td>\n<td>\u2264 2.10.6<\/td>\n<td>900,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-87920\" target=\"_blank\" rel=\"noopener\">CVE-2026-87920<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>W3 Total Cache<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08&#x27;comment&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\u7d4c\u7531\u3002Pro\u7248\u306e\u30e9\u30a4\u30bb\u30f3\u30b9\u304c\u5931\u52b9\u3057\u3001\u7279\u5b9a\u306e\u30ad\u30e3\u30c3\u30b7\u30e5\u8a2d\u5b9a\u304c\u6b8b\u3063\u3066\u3044\u308b\u5834\u5408\uff09<\/td>\n<td>\u2264 2.10.7<\/td>\n<td>900,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-111254\" target=\"_blank\" rel=\"noopener\">CVE-2026-111254<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>MainWP Child<\/td>\n<td>\u9ad8<\/td>\n<td>PHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308bPHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u2264 6.2.1<\/td>\n<td>700,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-105436\" target=\"_blank\" rel=\"noopener\">CVE-2026-105436<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Click to Chat<\/td>\n<td>\u9ad8<\/td>\n<td>\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08\u30d7\u30ec\u30fc\u30b9\u30db\u30eb\u30c0\u30fc{url}\u7d4c\u7531\u306eREQUEST_URI\u7d4c\u7531\uff09<\/td>\n<td>\u2264 4.44<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-92097\" target=\"_blank\" rel=\"noopener\">CVE-2026-92097<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Database Addon for Contact Form 7<\/td>\n<td>\u9ad8<\/td>\n<td>\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u306e\u524a\u9664<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u9650\u5b9a\u7684\u306a\u30d5\u30a1\u30a4\u30eb\u306e\u524a\u9664\uff08\u9001\u4fe1\u30c7\u30fc\u30bf\u306b\u633f\u5165\u3057\u305f\u9805\u76ee&#x27;attackcfdb7_file&#x27;\u7d4c\u7531\uff09<\/td>\n<td>\u2264 1.4.1<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-107652\" target=\"_blank\" rel=\"noopener\">CVE-2026-107652<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Forminator Forms<\/td>\n<td>\u9ad8<\/td>\n<td>\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u306e\u524a\u9664<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u9650\u5b9a\u7684\u306a\u30d5\u30a1\u30a4\u30eb\u306e\u524a\u9664\uff08\u4e0b\u66f8\u304d\u306e\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u306e\u30e1\u30bf\u30c7\u30fc\u30bf\u7d4c\u7531\uff09<\/td>\n<td>\u2264 1.55.0.2<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-5461\" target=\"_blank\" rel=\"noopener\">CVE-2026-5461<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Forminator Forms<\/td>\n<td>\u9ad8<\/td>\n<td>\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08\u30af\u30a4\u30ba\u901a\u77e5\u306e\u5dee\u3057\u8fbc\u307f\u30bf\u30b0\u7d4c\u7531\u306e&#x27;User-Agent&#x27;\u30d8\u30c3\u30c0\u30fc\u30fb&#x27;referer_url&#x27;\u30d1\u30e9\u30e1\u30fc\u30bf\u7d4c\u7531\uff09<\/td>\n<td>\u2264 1.58.1<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-101335\" target=\"_blank\" rel=\"noopener\">CVE-2026-101335<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Forminator Forms<\/td>\n<td>\u9ad8<\/td>\n<td>\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08render_block \u7d4c\u7531\u306e\u691c\u7d22\u30d1\u30e9\u30e1\u30fc\u30bf&#x27;s&#x27;\u3068\u533f\u540d\u30b3\u30e1\u30f3\u30c8\u7d4c\u7531\uff09<\/td>\n<td>\u2264 1.58.1<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-103911\" target=\"_blank\" rel=\"noopener\">CVE-2026-103911<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Forminator Forms<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 1.57.3<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-102388\" target=\"_blank\" rel=\"noopener\">CVE-2026-102388<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Forminator Forms<\/td>\n<td>\u9ad8<\/td>\n<td>\u6a29\u9650\u6607\u683c<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u6a29\u9650\u6607\u683c<\/td>\n<td>\u2264 1.57.3<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-96341\" target=\"_blank\" rel=\"noopener\">CVE-2026-96341<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Forminator Forms<\/td>\n<td>\u9ad8<\/td>\n<td>\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09\u306b\u3088\u308b\u4ed6\u30e6\u30fc\u30b6\u30fc\u306e\u4e0b\u66f8\u304d\u306e\u524a\u9664\u30fb\u4e57\u3063\u53d6\u308a\uff08&#x27;previous_draft_id&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\u7d4c\u7531\uff09<\/td>\n<td>\u2264 1.57.3.1<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-97638\" target=\"_blank\" rel=\"noopener\">CVE-2026-97638<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Ninja Forms<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u6bb5\u843d\u30c6\u30ad\u30b9\u30c8\uff08\u30ea\u30c3\u30c1\u30c6\u30ad\u30b9\u30c8\uff09\u9805\u76ee\u306e\u9001\u4fe1\u5185\u5bb9\u7d4c\u7531\uff09<\/td>\n<td>\u2264 3.15.4<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-90438\" target=\"_blank\" rel=\"noopener\">CVE-2026-90438<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Royal Addons for Elementor<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u60c5\u5831\u9732\u51fa<\/td>\n<td>Royal Addons for Elementor 1.3.81 &#8211; 1.7.1069<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-107100\" target=\"_blank\" rel=\"noopener\">CVE-2026-107100<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Royal Addons for Elementor<\/td>\n<td>\u9ad8<\/td>\n<td>\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>\u2264 1.7.1069<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-97255\" target=\"_blank\" rel=\"noopener\">CVE-2026-97255<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Royal Addons for Elementor<\/td>\n<td>\u9ad8<\/td>\n<td>\u30e1\u30fc\u30eb\u306e\u4e0d\u6b63\u306a\u4e2d\u7d99<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u30e1\u30fc\u30eb\u306e\u4e0d\u6b63\u306a\u4e2d\u7d99<\/td>\n<td>Royal Addons for Elementor &lt; 1.7.1070<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-106648\" target=\"_blank\" rel=\"noopener\">CVE-2026-106648<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>The Events Calendar<\/td>\n<td>\u9ad8<\/td>\n<td>PHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308bPHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u2264 6.17.4<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-95606\" target=\"_blank\" rel=\"noopener\">CVE-2026-95606<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Broken Link Checker<\/td>\n<td>\u9ad8<\/td>\n<td>\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08parser_callback\u7d4c\u7531\uff09<\/td>\n<td>\u2264 2.4.14.1<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-96562\" target=\"_blank\" rel=\"noopener\">CVE-2026-96562<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>GoSMTP<\/td>\n<td>\u9ad8<\/td>\n<td>\u6a29\u9650\u6607\u683c<\/td>\n<td>\u30ab\u30b9\u30bf\u30e0\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u6a29\u9650\u6607\u683c<\/td>\n<td>GoSMTP &lt; 1.2.5<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-111577\" target=\"_blank\" rel=\"noopener\">CVE-2026-111577<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Kirki<\/td>\n<td>\u9ad8<\/td>\n<td>\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09\u306b\u3088\u308b\u6a5f\u5bc6\u60c5\u5831\u306e\u9732\u51fa\uff08&#x27;context&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\u306b\u3088\u308b\u30b3\u30f3\u30c6\u30ad\u30b9\u30c8\u306e\u4e0d\u6b63\u306a\u6301\u3061\u8fbc\u307f\u7d4c\u7531\uff09<\/td>\n<td>\u2264 6.3.2<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-107762\" target=\"_blank\" rel=\"noopener\">CVE-2026-107762<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Kirki<\/td>\n<td>\u9ad8<\/td>\n<td>\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n<td>\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08&#x27;display_name&#x27;\u7d4c\u7531\uff09<\/td>\n<td>\u2264 6.3.1<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-102291\" target=\"_blank\" rel=\"noopener\">CVE-2026-102291<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Kirki<\/td>\n<td>\u9ad8<\/td>\n<td>\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n<td>\u2264 6.3.1<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-84220\" target=\"_blank\" rel=\"noopener\">CVE-2026-84220<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Kirki<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u767b\u9332\u6642\u306e\u30e1\u30bf\u30c7\u30fc\u30bf\u7d4c\u7531\uff09<\/td>\n<td>\u2264 6.3.1<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-102173\" target=\"_blank\" rel=\"noopener\">CVE-2026-102173<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Ninja Forms<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u53cd\u5c04\u578b\u306eDOM\u30d9\u30fc\u30b9\u306e\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08URL\u30d1\u30e9\u30e1\u30fc\u30bf&#x27;querystring:&lt;key&gt;&#x27;\u7d4c\u7531\uff09<\/td>\n<td>\u2264 3.15.5<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-100151\" target=\"_blank\" rel=\"noopener\">CVE-2026-100151<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Ninja Forms<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 3.15.5<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-110899\" target=\"_blank\" rel=\"noopener\">CVE-2026-110899<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Ninja Forms<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08&#x27;formData.extra&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\u7d4c\u7531\uff09<\/td>\n<td>\u2264 3.15.5<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-109997\" target=\"_blank\" rel=\"noopener\">CVE-2026-109997<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Ninja Forms<\/td>\n<td>\u9ad8<\/td>\n<td>\u5165\u529b\u5024\u691c\u8a3c\u306e\u4e0d\u5099<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u30b5\u30fc\u30d0\u30fc\u5074\u306e\u5165\u529b\u5024\u691c\u8a3c\u306e\u30d0\u30a4\u30d1\u30b9\u3068CSV\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\uff08\u30ea\u30b9\u30c8\u5f62\u5f0f\u306e\u9805\u76ee\u7d4c\u7531\uff09<\/td>\n<td>\u2264 3.15.3<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-67187\" target=\"_blank\" rel=\"noopener\">CVE-2026-67187<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Ocean Extra<\/td>\n<td>\u9ad8<\/td>\n<td>\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08&#x27;oceanwp_library&#x27; \u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u306e\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u7d4c\u7531\uff09<\/td>\n<td>\u2264 2.6.0<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-86803\" target=\"_blank\" rel=\"noopener\">CVE-2026-86803<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>BackWPup<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u60c5\u5831\u9732\u51fa<\/td>\n<td>BackWPup &lt; 5.7.7<\/td>\n<td>400,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-86826\" target=\"_blank\" rel=\"noopener\">CVE-2026-86826<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Kirki<\/td>\n<td>\u9ad8<\/td>\n<td>\u8a8d\u53ef\u306e\u4e0d\u5099<\/td>\n<td>Kirki\u306e\u7de8\u96c6\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\uff08\u65e2\u5b9a\u3067\u306f\u7de8\u96c6\u8005\uff09\u306b\u3088\u308b\u3001\u4ed6\u4eba\u306e\u6295\u7a3f\u306e\u30bf\u30a4\u30c8\u30eb\u30fb\u30b9\u30e9\u30c3\u30b0\u30fb\u516c\u958b\u72b6\u614b\u306e\u6539\u5909\uff08\u30da\u30fc\u30b8\u7528REST API\u7d4c\u7531\uff09<\/td>\n<td>\u2264 6.4.0<\/td>\n<td>400,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-112347\" target=\"_blank\" rel=\"noopener\">CVE-2026-112347<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>TranslatePress<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08trp-gettext\/TRPLINKPROCESSED \u30de\u30fc\u30ab\u30fc\u3092\u542b\u3080\u30b3\u30e1\u30f3\u30c8\u5185\u30ea\u30f3\u30af\u306ehref\u7d4c\u7531\uff09<\/td>\n<td>\u2264 3.3.7<\/td>\n<td>400,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-107768\" target=\"_blank\" rel=\"noopener\">CVE-2026-107768<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>TranslatePress<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 3.3.6<\/td>\n<td>400,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-103062\" target=\"_blank\" rel=\"noopener\">CVE-2026-103062<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Ad Inserter<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308bURL\u30d1\u30e9\u30e1\u30fc\u30bf&#x27;ai-debug-processing-fe&#x27;\u30fb&#x27;ai-debug-meta&#x27;\u304b\u3089\u306e\u6a5f\u5bc6\u60c5\u5831\u306e\u958b\u793a<\/td>\n<td>\u2264 2.8.18<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-89097\" target=\"_blank\" rel=\"noopener\">CVE-2026-89097<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Blocksy Companion<\/td>\n<td>\u9ad8<\/td>\n<td>\u6a29\u9650\u6607\u683c<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b&#x27;role&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\u3092\u60aa\u7528\u3057\u305f\u6a29\u9650\u6607\u683c<\/td>\n<td>\u2264 2.1.58<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-107645\" target=\"_blank\" rel=\"noopener\">CVE-2026-107645<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Cart Abandonment Recovery for WooCommerce<\/td>\n<td>\u9ad8<\/td>\n<td>\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>Cart Abandonment Recovery for WooCommerce &lt; 2.1.4<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-96900\" target=\"_blank\" rel=\"noopener\">CVE-2026-96900<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>CMB2<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u30d5\u30ed\u30f3\u30c8\u30a8\u30f3\u30c9\u306e\u30d5\u30a9\u30fc\u30e0\u304b\u3089\u306e\u30b0\u30eb\u30fc\u30d7\u5316\u3055\u308c\u305fWYSIWYG\u9805\u76ee\u7d4c\u7531\uff09<\/td>\n<td>\u2264 2.13.4<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-116761\" target=\"_blank\" rel=\"noopener\">CVE-2026-116761<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>CMB2<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u9805\u76ee\u30bf\u30a4\u30d7&#x27;file_list&#x27;\u7d4c\u7531\uff09<\/td>\n<td>\u2264 2.13.0<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-97336\" target=\"_blank\" rel=\"noopener\">CVE-2026-97336<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>CMB2<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08&#x27;textarea_code&#x27; \u9805\u76ee\u7d4c\u7531\uff09<\/td>\n<td>\u2264 2.13.1<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-102772\" target=\"_blank\" rel=\"noopener\">CVE-2026-102772<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Formidable Forms<\/td>\n<td>\u9ad8<\/td>\n<td>\u4efb\u610f\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/td>\n<td>\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u4efb\u610f\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\uff08&#x27;file_url&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\u7d4c\u7531\uff09<\/td>\n<td>\u2264 6.35<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-89435\" target=\"_blank\" rel=\"noopener\">CVE-2026-89435<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Formidable Forms<\/td>\n<td>\u9ad8<\/td>\n<td>\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09<\/td>\n<td>Formidable Forms &lt; 7.0<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-85642\" target=\"_blank\" rel=\"noopener\">CVE-2026-85642<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Jeg Kit for Elementor<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u30b3\u30e1\u30f3\u30c8\u7d4c\u7531\uff09<\/td>\n<td>\u2264 3.2.19<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-100180\" target=\"_blank\" rel=\"noopener\">CVE-2026-100180<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>NextGEN Gallery<\/td>\n<td>\u9ad8<\/td>\n<td>\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09<\/td>\n<td>\u30ab\u30b9\u30bf\u30e0\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\uff08legacy_render \u95a2\u6570\u7d4c\u7531\uff09<\/td>\n<td>\u2264 4.4.1<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-76012\" target=\"_blank\" rel=\"noopener\">CVE-2026-76012<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>OMGF<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08comments-atom \u30d5\u30a3\u30fc\u30c9\u306e\u691c\u7d22\u30d1\u30e9\u30e1\u30fc\u30bf&#x27;s&#x27;\u7d4c\u7531\uff09<\/td>\n<td>\u2264 6.3.10<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-89417\" target=\"_blank\" rel=\"noopener\">CVE-2026-89417<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Otter Blocks<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u30d5\u30a9\u30fc\u30e0\u9001\u4fe1\u30c7\u30fc\u30bf\u306e\u30c0\u30c3\u30b7\u30e5\u30dc\u30fc\u30c9\u30a6\u30a3\u30b8\u30a7\u30c3\u30c8\u304b\u3089\u306e\u6a5f\u5bc6\u60c5\u5831\u306e\u9732\u51fa<\/td>\n<td>\u2264 3.2.6<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-102002\" target=\"_blank\" rel=\"noopener\">CVE-2026-102002<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>PDF Invoices &amp; Packing Slips for WooCommerce<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u8acb\u6c42\u5148\u306e\u6c0f\u540d\u30fb\u4f1a\u793e\u540d\u30fb\u6ce8\u6587\u30e1\u30e2\u7d4c\u7531\u3002CVE-2026-92244 \u306e\u4fee\u6b63\u304c\u4e0d\u5b8c\u5168\u3060\u3063\u305f\u3082\u306e\uff09<\/td>\n<td>\u2264 5.16.4<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-107750\" target=\"_blank\" rel=\"noopener\">CVE-2026-107750<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Photo Gallery, Sliders, Proofing and Themes<\/td>\n<td>\u9ad8<\/td>\n<td>\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09<\/td>\n<td>\u30ab\u30b9\u30bf\u30e0\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\uff08XML-RPC\u306e&#x27;meta_data&#x27;\u306e\u4e00\u62ec\u4ee3\u5165\u3068\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u7d4c\u7531\uff09<\/td>\n<td>\u2264 4.4.1<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-76010\" target=\"_blank\" rel=\"noopener\">CVE-2026-76010<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Post SMTP<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u306eDOM\u30d9\u30fc\u30b9\u306e\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08&#x27;user_email&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\uff08\u30de\u30eb\u30c1\u30b5\u30a4\u30c8\u306e\u767b\u9332 \u2192 \u9001\u4fe1\u5931\u6557\u30e1\u30fc\u30eb\u306e\u30ed\u30b0\uff09\u7d4c\u7531\uff09<\/td>\n<td>\u2264 4.0.1<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-75962\" target=\"_blank\" rel=\"noopener\">CVE-2026-75962<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Unlimited Elements for Elementor<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 2.0.19<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-94662\" target=\"_blank\" rel=\"noopener\">CVE-2026-94662<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>WebP Express<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 0.25.15<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-97328\" target=\"_blank\" rel=\"noopener\">CVE-2026-97328<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>WP Rollback<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u60c5\u5831\u9732\u51fa<\/td>\n<td>\u2264 3.1.2<\/td>\n<td>300,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-66435\" target=\"_blank\" rel=\"noopener\">CVE-2026-66435<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Advanced Google reCAPTCHA<\/td>\n<td>\u9ad8<\/td>\n<td>\u4fdd\u8b77\u6a5f\u80fd\u306e\u30d0\u30a4\u30d1\u30b9<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u30ed\u30b0\u30a4\u30f3\u4fdd\u8b77\u306e\u30d0\u30a4\u30d1\u30b9<\/td>\n<td>\u2264 5.40<\/td>\n<td>200,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-100518\" target=\"_blank\" rel=\"noopener\">CVE-2026-100518<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Anti-Spam by CleanTalk<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08ContactsEncoder \u306e\u6b63\u898f\u8868\u73fe\u306e\u6700\u9577\u4e00\u81f4\u3092\u60aa\u7528\u3057\u305f\u30b3\u30e1\u30f3\u30c8\u672c\u6587\u7d4c\u7531\uff09<\/td>\n<td>\u2264 6.88<\/td>\n<td>200,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-103424\" target=\"_blank\" rel=\"noopener\">CVE-2026-103424<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Burst Statistics<\/td>\n<td>\u9ad8<\/td>\n<td>\u4e0d\u9069\u5207\u306a\u8a8d\u8a3c<\/td>\n<td>\u4e0d\u9069\u5207\u306a\u8a8d\u8a3c\u306b\u3088\u308b\u30a2\u30ab\u30a6\u30f3\u30c8\u3078\u306e\u30a2\u30af\u30bb\u30b9\u306e\u7d99\u7d9a\uff08&#x27;burst_share_token&#x27; \u306b\u3088\u308b\u5171\u6709\u30ea\u30f3\u30af\u306e\u8a8d\u8a3c\u306e\u30d0\u30a4\u30d1\u30b9\u7d4c\u7531\uff09<\/td>\n<td>\u2264 3.7.1<\/td>\n<td>200,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-97343\" target=\"_blank\" rel=\"noopener\">CVE-2026-97343<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>CleanTalk Anti-Spam<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u767b\u9332\u6642\u306e\u30d1\u30e9\u30e1\u30fc\u30bf&#x27;user_email&#x27;\u7d4c\u7531\uff09<\/td>\n<td>\u2264 6.89.1<\/td>\n<td>200,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-109198\" target=\"_blank\" rel=\"noopener\">CVE-2026-109198<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>MW WP Form<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b&#x27;post_id&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\u304b\u3089\u306e\u6a5f\u5bc6\u60c5\u5831\u306e\u9732\u51fa<\/td>\n<td>\u2264 5.1.7<\/td>\n<td>200,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-92086\" target=\"_blank\" rel=\"noopener\">CVE-2026-92086<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>MW WP Form<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08&#x27;post_id&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\uff08\u30d5\u30a9\u30fc\u30e0\u9001\u4fe1\u3067\u4fdd\u5b58\u3055\u308c\u305f\u6295\u7a3f\u30e1\u30bf\u7d4c\u7531\uff09\u7d4c\u7531\uff09<\/td>\n<td>\u2264 5.1.7<\/td>\n<td>200,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-96567\" target=\"_blank\" rel=\"noopener\">CVE-2026-96567<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Newsletter<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u30ab\u30b9\u30bf\u30e0\u30d5\u30a3\u30fc\u30eb\u30c9\u306e\u30d1\u30e9\u30e1\u30fc\u30bf&#x27;np1&#x27;\u7d4c\u7531\uff09<\/td>\n<td>\u2264 9.4.0<\/td>\n<td>200,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-96566\" target=\"_blank\" rel=\"noopener\">CVE-2026-96566<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Optimole<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u60c5\u5831\u9732\u51fa<\/td>\n<td>Optimole 4.0.0 &#8211; 4.2.14<\/td>\n<td>200,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-96530\" target=\"_blank\" rel=\"noopener\">CVE-2026-96530<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Redirection for Contact Form 7<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>Redirection for Contact Form 7 2.2.7 &#8211; 3.2.11<\/td>\n<td>200,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-111574\" target=\"_blank\" rel=\"noopener\">CVE-2026-111574<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Smash Balloon Social Post Feed<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u7ba1\u7406\u753b\u9762\u306e\u30d3\u30eb\u30c0\u30fc\u306e\u30d7\u30ec\u30d3\u30e5\u30fc\u306b\u8868\u793a\u3055\u308c\u308b Facebook \u30b3\u30e1\u30f3\u30c8\u7d4c\u7531\uff09<\/td>\n<td>\u2264 4.13.0<\/td>\n<td>200,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-93756\" target=\"_blank\" rel=\"noopener\">CVE-2026-93756<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Ultimate Member<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08&#x27;form_id&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\u7d4c\u7531\uff09<\/td>\n<td>\u2264 2.13.1<\/td>\n<td>200,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-96270\" target=\"_blank\" rel=\"noopener\">CVE-2026-96270<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>WPConsent<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08Simple HTML DOM Parser \u306e\u5fa9\u5143\u51e6\u7406\u3092\u60aa\u7528\u3057\u305f\u30b3\u30e1\u30f3\u30c8\u672c\u6587\uff08mXSS\uff09\u7d4c\u7531\uff09<\/td>\n<td>\u2264 1.1.9<\/td>\n<td>200,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-97640\" target=\"_blank\" rel=\"noopener\">CVE-2026-97640<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Advanced Ads<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u60c5\u5831\u9732\u51fa<\/td>\n<td>\u2264 2.0.26<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-94180\" target=\"_blank\" rel=\"noopener\">CVE-2026-94180<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Advanced Custom Fields: Extended<\/td>\n<td>\u9ad8<\/td>\n<td>\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09<\/td>\n<td>\u2264 0.9.2.7<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-94267\" target=\"_blank\" rel=\"noopener\">CVE-2026-94267<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Advanced Custom Fields: Extended<\/td>\n<td>\u9ad8<\/td>\n<td>\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n<td>\u2264 0.9.2.7<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-94263\" target=\"_blank\" rel=\"noopener\">CVE-2026-94263<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Advanced Custom Fields: Extended<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 0.9.2.7<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-112313\" target=\"_blank\" rel=\"noopener\">CVE-2026-112313<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Advanced Custom Fields: Extended<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u6a5f\u5bc6\u60c5\u5831\u306e\u9732\u51fa\uff08\u30e6\u30fc\u30b6\u30fc\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u30cf\u30c3\u30b7\u30e5\u306a\u3069\u3002\u516c\u958b\u30d5\u30a9\u30fc\u30e0\u306b\u7279\u5b9a\u306e\u8a2d\u5b9a\u304c\u3042\u308b\u5834\u5408\uff09<\/td>\n<td>\u2264 0.9.2.7<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-110305\" target=\"_blank\" rel=\"noopener\">CVE-2026-110305<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Advanced File Manager<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u30ab\u30b9\u30bf\u30e0\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>Advanced File Manager &lt; 6.0.0<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-79627\" target=\"_blank\" rel=\"noopener\">CVE-2026-79627<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Appointment Booking Plugin<\/td>\n<td>\u9ad8<\/td>\n<td>\u6c7a\u6e08\u306e\u30d0\u30a4\u30d1\u30b9<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u6c7a\u6e08\u306e\u30d0\u30a4\u30d1\u30b9<\/td>\n<td>\u2264 5.7.4<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-105256\" target=\"_blank\" rel=\"noopener\">CVE-2026-105256<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Appointment Booking Plugin<\/td>\n<td>\u9ad8<\/td>\n<td>\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>\u2264 5.7.4<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-105257\" target=\"_blank\" rel=\"noopener\">CVE-2026-105257<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Appointment Booking Plugin<\/td>\n<td>\u9ad8<\/td>\n<td>\u8a8d\u8a3c\u306e\u30d0\u30a4\u30d1\u30b9<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u8a8d\u8a3c\u306e\u30d0\u30a4\u30d1\u30b9\uff08\u30ef\u30f3\u30bf\u30a4\u30e0\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u8a66\u884c\u56de\u6570\u30ab\u30a6\u30f3\u30bf\u30fc\u306e\u7af6\u5408\u72b6\u614b\u7d4c\u7531\uff09<\/td>\n<td>\u2264 5.7.4<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-110653\" target=\"_blank\" rel=\"noopener\">CVE-2026-110653<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Appointment Booking Plugin<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u6a5f\u5bc6\u60c5\u5831\u306e\u958b\u793a\uff08&#x27;customer[uuid]&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\u3078\u306eORM\u6f14\u7b97\u5b50\u306e\u633f\u5165\u7d4c\u7531\uff09<\/td>\n<td>\u2264 5.7.4<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-111602\" target=\"_blank\" rel=\"noopener\">CVE-2026-111602<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Appointment Booking Plugin<\/td>\n<td>\u9ad8<\/td>\n<td>\u8a8d\u8a3c\u306e\u30d0\u30a4\u30d1\u30b9<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u8a8d\u8a3c\u306e\u30d0\u30a4\u30d1\u30b9\u306b\u3088\u308b\u9867\u5ba2\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u4e57\u3063\u53d6\u308a\uff08create_wp_user_for_customer() \u306e username_exists \u306b\u3088\u308b\u4ee3\u66ff\u51e6\u7406\u3067\u306e\u691c\u8a3c\u306e\u4e0d\u5099\u7d4c\u7531\uff09<\/td>\n<td>\u2264 5.7.2<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-100163\" target=\"_blank\" rel=\"noopener\">CVE-2026-100163<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Appointment Booking Plugin<\/td>\n<td>\u9ad8<\/td>\n<td>\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09\u306b\u3088\u308b\u6a5f\u5bc6\u60c5\u5831\u306e\u958b\u793a\uff08&#x27;booking[id]&#x27;\u30fb&#x27;cart[id]&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\u7d4c\u7531\uff09<\/td>\n<td>\u2264 5.7.3<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-103366\" target=\"_blank\" rel=\"noopener\">CVE-2026-103366<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Appointment Booking Plugin<\/td>\n<td>\u9ad8<\/td>\n<td>\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>\u30ab\u30b9\u30bf\u30e0\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>Appointment Booking Plugin &lt; 5.6.5<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-105197\" target=\"_blank\" rel=\"noopener\">CVE-2026-105197<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Appointment Booking Plugin<\/td>\n<td>\u9ad8<\/td>\n<td>\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>\u30ab\u30b9\u30bf\u30e0\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>Appointment Booking Plugin &lt; 5.6.9<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-105196\" target=\"_blank\" rel=\"noopener\">CVE-2026-105196<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Appointment Booking Plugin<\/td>\n<td>\u9ad8<\/td>\n<td>\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>Appointment Booking Plugin &lt; 5.7.3<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-105198\" target=\"_blank\" rel=\"noopener\">CVE-2026-105198<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Appointment Booking Plugin<\/td>\n<td>\u9ad8<\/td>\n<td>\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09\u306b\u3088\u308b\u4efb\u610f\u306e\u9867\u5ba2\u306e\u500b\u4eba\u60c5\u5831\u306e\u6539\u5909<\/td>\n<td>\u2264 5.6.9<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-17538\" target=\"_blank\" rel=\"noopener\">CVE-2026-17538<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Beaver Builder Page Builder<\/td>\n<td>\u9ad8<\/td>\n<td>\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08\u30b5\u30a4\u30c9\u30d0\u30fc\u306e\u30e2\u30b8\u30e5\u30fc\u30eb\u30a6\u30a3\u30b8\u30a7\u30c3\u30c8\u306e\u51fa\u529b\u7d4c\u7531\uff09<\/td>\n<td>\u2264 2.11.0.5<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-92084\" target=\"_blank\" rel=\"noopener\">CVE-2026-92084<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Download Manager<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u53cd\u5c04\u578b\u306eDOM\u30d9\u30fc\u30b9\u306e\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08&#x27;REFERRER&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\u7d4c\u7531\uff09<\/td>\n<td>\u2264 3.3.57<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-12054\" target=\"_blank\" rel=\"noopener\">CVE-2026-12054<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Download Manager<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u60c5\u5831\u9732\u51fa<\/td>\n<td>\u2264 3.3.70<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-94405\" target=\"_blank\" rel=\"noopener\">CVE-2026-94405<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>DTX<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u60c5\u5831\u9732\u51fa<\/td>\n<td>\u2264 5.0.7<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-62043\" target=\"_blank\" rel=\"noopener\">CVE-2026-62043<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>GiveWP<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u60c5\u5831\u9732\u51fa<\/td>\n<td>\u2264 4.19.0.0<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-111976\" target=\"_blank\" rel=\"noopener\">CVE-2026-111976<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>GiveWP<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>GiveWP\u306e\u30ef\u30fc\u30ab\u30fc\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 4.19.0.0<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-111979\" target=\"_blank\" rel=\"noopener\">CVE-2026-111979<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>GiveWP<\/td>\n<td>\u9ad8<\/td>\n<td>\u4fdd\u8b77\u6a5f\u80fd\u306e\u30d0\u30a4\u30d1\u30b9<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u5bc4\u4ed8\u91d1\u984d\u306e\u5236\u9650\u306e\u30d0\u30a4\u30d1\u30b9<\/td>\n<td>\u2264 4.19.0.0<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-111974\" target=\"_blank\" rel=\"noopener\">CVE-2026-111974<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>GiveWP<\/td>\n<td>\u9ad8<\/td>\n<td>\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb<\/td>\n<td>GiveWP\u306e\u30de\u30cd\u30fc\u30b8\u30e3\u30fc\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb<\/td>\n<td>\u2264 4.19.0.0<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-111978\" target=\"_blank\" rel=\"noopener\">CVE-2026-111978<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>GiveWP<\/td>\n<td>\u9ad8<\/td>\n<td>\u6a29\u9650\u6607\u683c<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u6a29\u9650\u6607\u683c<\/td>\n<td>\u2264 4.17.0<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-104405\" target=\"_blank\" rel=\"noopener\">CVE-2026-104405<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>GiveWP<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 4.17.0<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-104672\" target=\"_blank\" rel=\"noopener\">CVE-2026-104672<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Hide My WP Ghost<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u30b3\u30e1\u30f3\u30c8\u672c\u6587\u7d4c\u7531\uff09<\/td>\n<td>\u2264 7.0.12<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-89051\" target=\"_blank\" rel=\"noopener\">CVE-2026-89051<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>LazyLoad Plugin<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u30b3\u30e1\u30f3\u30c8\u672c\u6587\u7d4c\u7531\uff09<\/td>\n<td>\u2264 2.4.0<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-100196\" target=\"_blank\" rel=\"noopener\">CVE-2026-100196<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Login Lockdown &amp; Protection<\/td>\n<td>\u9ad8<\/td>\n<td>\u4fdd\u8b77\u6a5f\u80fd\u306e\u30d0\u30a4\u30d1\u30b9<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u30ed\u30b0\u30a4\u30f3\u8a66\u884c\u5236\u9650\u306e\u30d0\u30a4\u30d1\u30b9<\/td>\n<td>\u2264 2.17<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-97308\" target=\"_blank\" rel=\"noopener\">CVE-2026-97308<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Modula Image Gallery<\/td>\n<td>\u9ad8<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09\u306b\u3088\u308b\u6a5f\u5bc6\u60c5\u5831\u306e\u9732\u51fa\uff08\u30ab\u30b9\u30bf\u30e0\u6295\u7a3f\u30bf\u30a4\u30d7 modula-gallery \u3067\u516c\u958b\u3055\u308c\u3066\u3044\u308b REST\u30d5\u30a3\u30fc\u30eb\u30c9&#x27;modulaSettings&#x27;\u7d4c\u7531\uff09<\/td>\n<td>\u2264 3.0.11<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-107659\" target=\"_blank\" rel=\"noopener\">CVE-2026-107659<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Modula Image Gallery<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u60c5\u5831\u9732\u51fa<\/td>\n<td>\u2264 3.0.11<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-105876\" target=\"_blank\" rel=\"noopener\">CVE-2026-105876<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile &amp; Restrict Content<\/td>\n<td>\u9ad8<\/td>\n<td>\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n<td>\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u4efb\u610f\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08ProfilePress \u306e\u30e6\u30fc\u30b6\u30fc\u30d7\u30ed\u30d5\u30a3\u30fc\u30eb\u306e\u300c\u30b3\u30e1\u30f3\u30c8\u300d\u30bf\u30d6\u306b\u8868\u793a\u3055\u308c\u308b\u30b3\u30e1\u30f3\u30c8\u672c\u6587\u7d4c\u7531\uff09<\/td>\n<td>\u2264 4.17.5<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-104003\" target=\"_blank\" rel=\"noopener\">CVE-2026-104003<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile &amp; Restrict Content<\/td>\n<td>\u9ad8<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u6a5f\u5bc6\u60c5\u5831\u306e\u9732\u51fa\uff08\u30d7\u30ed\u30d5\u30a3\u30fc\u30eb\u306e\u30cb\u30c3\u30af\u30cd\u30fc\u30e0\u30fb\u30d7\u30ed\u30d5\u30a3\u30fc\u30eb\u60c5\u5831\u6b04\u3078\u306e\u30b7\u30e7\u30fc\u30c8\u30b3\u30fc\u30c9\u306e\u633f\u5165\u7d4c\u7531\uff09<\/td>\n<td>\u2264 4.17.4<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-92536\" target=\"_blank\" rel=\"noopener\">CVE-2026-92536<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Payment Plugins for Stripe WooCommerce<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u53cd\u5c04\u578b\u306eDOM\u30d9\u30fc\u30b9\u306e\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08URL\u30d5\u30e9\u30b0\u30e1\u30f3\u30c8&#x27;#response&#x27;\u7d4c\u7531\uff09<\/td>\n<td>\u2264 4.0.17<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-89100\" target=\"_blank\" rel=\"noopener\">CVE-2026-89100<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Photo Gallery by 10Web<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 1.8.47<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-42715\" target=\"_blank\" rel=\"noopener\">CVE-2026-42715<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Presto Player<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08&lt;presto-player&gt; \u30bf\u30b0\u3092\u542b\u3080\u30b3\u30e1\u30f3\u30c8\u672c\u6587\u7d4c\u7531\uff09<\/td>\n<td>\u2264 4.5.1<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-96682\" target=\"_blank\" rel=\"noopener\">CVE-2026-96682<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Prime Slider<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08Content_Guard \u306e\u6b63\u898f\u8868\u73fe\u306e\u5f15\u7528\u7b26\u30a8\u30b9\u30b1\u30fc\u30d7\u3092\u60aa\u7528\u3057\u305f\u30b3\u30e1\u30f3\u30c8\u672c\u6587\u7d4c\u7531\uff09<\/td>\n<td>\u2264 4.7.2<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-111111\" target=\"_blank\" rel=\"noopener\">CVE-2026-111111<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Real Cookie Banner: GDPR &amp; ePrivacy Cookie Consent<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u30b3\u30e1\u30f3\u30c8\u7d4c\u7531\uff09<\/td>\n<td>\u2264 5.3.5<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-92977\" target=\"_blank\" rel=\"noopener\">CVE-2026-92977<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Relevanssi<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u30b3\u30e1\u30f3\u30c8\u672c\u6587\u7d4c\u7531\uff09<\/td>\n<td>\u2264 4.28.3<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-97641\" target=\"_blank\" rel=\"noopener\">CVE-2026-97641<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Relevanssi<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08&#x27;comment&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\u7d4c\u7531\u3002\u30b3\u30e1\u30f3\u30c8\u306e\u7d22\u5f15\u5316\u3068\u5f37\u8abf\u8868\u793a\u304c\u6709\u52b9\u306a\u5834\u5408\uff09<\/td>\n<td>\u2264 4.28.5<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-116522\" target=\"_blank\" rel=\"noopener\">CVE-2026-116522<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Schema &amp; Structured Data for WP &amp; AMP<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08&#x27;saswp_review_text&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\u7d4c\u7531\uff09<\/td>\n<td>\u2264 1.67<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-96570\" target=\"_blank\" rel=\"noopener\">CVE-2026-96570<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Search Regex<\/td>\n<td>\u9ad8<\/td>\n<td>\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09<\/td>\n<td>\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\uff08\u30e6\u30fc\u30b6\u30fc\u30e1\u30bf\u306e\u30b7\u30ea\u30a2\u30e9\u30a4\u30ba\u6587\u5b57\u5217\u306e\u7834\u640d\u7d4c\u7531\uff09<\/td>\n<td>\u2264 3.5<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-104932\" target=\"_blank\" rel=\"noopener\">CVE-2026-104932<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>SiteOrigin CSS<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u306eDOM\u30d9\u30fc\u30b9\u306e\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u30d3\u30b8\u30e5\u30a2\u30eb\u30a4\u30f3\u30b9\u30da\u30af\u30bf\u30fc\u3067\u306e\u30b3\u30e1\u30f3\u30c8\u5185\u30ea\u30f3\u30af\u306ehref\u7d4c\u7531\uff09<\/td>\n<td>\u2264 1.6.7<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-111122\" target=\"_blank\" rel=\"noopener\">CVE-2026-111122<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Social Sharing Plugin<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 3.3.79<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-94170\" target=\"_blank\" rel=\"noopener\">CVE-2026-94170<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>String locator<\/td>\n<td>\u9ad8<\/td>\n<td>PHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308bPHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u2264 2.6.7<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-97188\" target=\"_blank\" rel=\"noopener\">CVE-2026-97188<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Tutor LMS<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u53cd\u5c04\u578b\u306eDOM\u30d9\u30fc\u30b9\u306e\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08&#x27;redirect_url&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\u7d4c\u7531\uff09<\/td>\n<td>\u2264 4.0.8<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-88963\" target=\"_blank\" rel=\"noopener\">CVE-2026-88963<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Tutor LMS<\/td>\n<td>\u9ad8<\/td>\n<td>\u7af6\u5408\u72b6\u614b\uff08\u30ec\u30fc\u30b9\u30b3\u30f3\u30c7\u30a3\u30b7\u30e7\u30f3\uff09<\/td>\n<td>\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u7af6\u5408\u72b6\u614b\uff08\u30ec\u30fc\u30b9\u30b3\u30f3\u30c7\u30a3\u30b7\u30e7\u30f3\uff09<\/td>\n<td>\u2264 4.1.2<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-42698\" target=\"_blank\" rel=\"noopener\">CVE-2026-42698<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Tutor LMS<\/td>\n<td>\u9ad8<\/td>\n<td>\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>\u8b1b\u5e2b\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u5b89\u5168\u3067\u306a\u3044\u76f4\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167\uff08IDOR\uff09<\/td>\n<td>Tutor LMS 4.0.5 &#8211; 4.1.0<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-85571\" target=\"_blank\" rel=\"noopener\">CVE-2026-85571<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Tutor LMS<\/td>\n<td>\u9ad8<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 4.1.0<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-42702\" target=\"_blank\" rel=\"noopener\">CVE-2026-42702<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>WPML Multilingual &amp; Multicurrency for WooCommerce<\/td>\n<td>\u9ad8<\/td>\n<td>PHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u30b7\u30e7\u30c3\u30d7\u30de\u30cd\u30fc\u30b8\u30e3\u30fc\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308bPHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u2264 5.5.8<\/td>\n<td>100,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-62130\" target=\"_blank\" rel=\"noopener\">CVE-2026-62130<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Elementor Website Builder<\/td>\n<td>\u4e2d<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u6295\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 4.3.4<\/td>\n<td>10,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-81812\" target=\"_blank\" rel=\"noopener\">CVE-2026-81812<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Elementor Website Builder<\/td>\n<td>\u4e2d<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u5bc4\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 4.3.4<\/td>\n<td>10,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-81813\" target=\"_blank\" rel=\"noopener\">CVE-2026-81813<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Elementor Website Builder<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u5bc4\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09\u306b\u3088\u308b\u6a5f\u5bc6\u60c5\u5831\u306e\u9732\u51fa\uff08&#x27;is_public&#x27;\u30fb&#x27;keys_conversion_map&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\u7d4c\u7531\uff09<\/td>\n<td>\u2264 4.2.3<\/td>\n<td>10,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-11905\" target=\"_blank\" rel=\"noopener\">CVE-2026-11905<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>LiteSpeed Cache<\/td>\n<td>\u4e2d<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08VPI\u753b\u50cf\u5c5e\u6027\u306e\u518d\u30b7\u30ea\u30a2\u30e9\u30a4\u30ba\u7d4c\u7531\uff09<\/td>\n<td>\u2264 7.9.1<\/td>\n<td>7,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-109215\" target=\"_blank\" rel=\"noopener\">CVE-2026-109215<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>LiteSpeed Cache<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09<\/td>\n<td>LiteSpeed Cache &lt; 7.9.2<\/td>\n<td>7,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-113501\" target=\"_blank\" rel=\"noopener\">CVE-2026-113501<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Rank Math SEO<\/td>\n<td>\u4e2d<\/td>\n<td>PHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u5bc4\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308bPHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306b\u3088\u308b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09<\/td>\n<td>\u2264 1.0.276<\/td>\n<td>4,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-1928\" target=\"_blank\" rel=\"noopener\">CVE-2026-1928<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Jetpack<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09<\/td>\n<td>\u2264 16.2<\/td>\n<td>3,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-106601\" target=\"_blank\" rel=\"noopener\">CVE-2026-106601<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Code Snippets<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09<\/td>\n<td>\u2264 3.9.0<\/td>\n<td>1,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-106095\" target=\"_blank\" rel=\"noopener\">CVE-2026-106095<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Essential Addons for Elementor<\/td>\n<td>\u4e2d<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u6295\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>Essential Addons for Elementor &lt; 6.8.7<\/td>\n<td>1,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-110510\" target=\"_blank\" rel=\"noopener\">CVE-2026-110510<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Essential Addons for Elementor<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09<\/td>\n<td>Essential Addons for Elementor &lt; 6.8.7<\/td>\n<td>1,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-110537\" target=\"_blank\" rel=\"noopener\">CVE-2026-110537<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Essential Addons for Elementor<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u6607\u683c<\/td>\n<td>\u6295\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u6a29\u9650\u6607\u683c<\/td>\n<td>\u2264 6.8.5<\/td>\n<td>1,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-110898\" target=\"_blank\" rel=\"noopener\">CVE-2026-110898<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Speed Optimizer<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09<\/td>\n<td>Speed Optimizer &lt; 7.8.5<\/td>\n<td>1,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-111738\" target=\"_blank\" rel=\"noopener\">CVE-2026-111738<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Starter Templates: AI-Powered Website Templates for Elementor &amp; Gutenberg<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09<\/td>\n<td>\u2264 4.7.7<\/td>\n<td>1,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-39721\" target=\"_blank\" rel=\"noopener\">CVE-2026-39721<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Starter Templates: AI-Powered Website Templates for Elementor &amp; Gutenberg<\/td>\n<td>\u4e2d<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u5bc4\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 4.7.7<\/td>\n<td>1,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-102393\" target=\"_blank\" rel=\"noopener\">CVE-2026-102393<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Polylang<\/td>\n<td>\u4e2d<\/td>\n<td>PHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u7de8\u96c6\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308bPHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u2264 3.8.9<\/td>\n<td>900,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-97278\" target=\"_blank\" rel=\"noopener\">CVE-2026-97278<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Polylang<\/td>\n<td>\u4e2d<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u5bc4\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u60c5\u5831\u9732\u51fa<\/td>\n<td>\u2264 3.8.7<\/td>\n<td>900,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-39783\" target=\"_blank\" rel=\"noopener\">CVE-2026-39783<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>W3 Total Cache<\/td>\n<td>\u4e2d<\/td>\n<td>\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb<\/td>\n<td>\u6295\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb<\/td>\n<td>\u2264 2.10.5<\/td>\n<td>900,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-107321\" target=\"_blank\" rel=\"noopener\">CVE-2026-107321<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Autoptimize<\/td>\n<td>\u4e2d<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u30b3\u30e1\u30f3\u30c8\u6295\u7a3f\u8005\u540d\u7d4c\u7531\uff09<\/td>\n<td>\u2264 3.1.15.1<\/td>\n<td>800,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-78471\" target=\"_blank\" rel=\"noopener\">CVE-2026-78471<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Fluent Forms<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09<\/td>\n<td>\u2264 6.2.15<\/td>\n<td>800,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-111831\" target=\"_blank\" rel=\"noopener\">CVE-2026-111831<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Fluent Forms<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u30ab\u30b9\u30bf\u30e0\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09\u306b\u3088\u308b\u6a5f\u5bc6\u30c7\u30fc\u30bf\u306e\u9732\u51fa\u3068\u6539\u5909<\/td>\n<td>\u2264 6.2.5<\/td>\n<td>700,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-15178\" target=\"_blank\" rel=\"noopener\">CVE-2026-15178<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Enable Media Replace<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u6295\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09\u306b\u3088\u308b\u6295\u7a3f\u672c\u6587\u306e\u6539\u5909\uff08\u30e1\u30c7\u30a3\u30a2\u306e\u5dee\u3057\u66ff\u3048\u51e6\u7406\u7d4c\u7531\uff09<\/td>\n<td>\u2264 4.2.2<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-85655\" target=\"_blank\" rel=\"noopener\">CVE-2026-85655<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Forminator Forms<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09<\/td>\n<td>\u2264 1.58.0<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-108486\" target=\"_blank\" rel=\"noopener\">CVE-2026-108486<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Forminator Forms<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09<\/td>\n<td>\u2264 1.57.3<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-65459\" target=\"_blank\" rel=\"noopener\">CVE-2026-65459<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Forminator Forms<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09<\/td>\n<td>\u2264 1.57.2<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-96335\" target=\"_blank\" rel=\"noopener\">CVE-2026-96335<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Kadence Blocks<\/td>\n<td>\u4e2d<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u5bc4\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 3.8.0.1<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-115602\" target=\"_blank\" rel=\"noopener\">CVE-2026-115602<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Kadence Blocks<\/td>\n<td>\u4e2d<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u6295\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u30d6\u30ed\u30c3\u30af\u306e\u30d5\u30a9\u30f3\u30c8\u30d5\u30a1\u30df\u30ea\u30fc\u5c5e\u6027\u7d4c\u7531\uff09<\/td>\n<td>\u2264 3.7.12<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-104762\" target=\"_blank\" rel=\"noopener\">CVE-2026-104762<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Kadence Blocks<\/td>\n<td>\u4e2d<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u5bc4\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 3.7.12<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-105890\" target=\"_blank\" rel=\"noopener\">CVE-2026-105890<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Kadence Blocks<\/td>\n<td>\u4e2d<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 3.7.11.1<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-103354\" target=\"_blank\" rel=\"noopener\">CVE-2026-103354<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>MetForm<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09<\/td>\n<td>\u2264 4.3.2<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-114180\" target=\"_blank\" rel=\"noopener\">CVE-2026-114180<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Premium Addons for Elementor<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09<\/td>\n<td>\u2264 4.11.110<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-109890\" target=\"_blank\" rel=\"noopener\">CVE-2026-109890<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Premium Addons for Elementor<\/td>\n<td>\u4e2d<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u5bc4\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 4.11.110<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-108482\" target=\"_blank\" rel=\"noopener\">CVE-2026-108482<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Premium Addons for Elementor<\/td>\n<td>\u4e2d<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u5bc4\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 4.11.109<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-103084\" target=\"_blank\" rel=\"noopener\">CVE-2026-103084<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Royal Addons for Elementor<\/td>\n<td>\u4e2d<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u5bc4\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>Royal Addons for Elementor 1.7.1037 &#8211; 1.7.1069<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-107098\" target=\"_blank\" rel=\"noopener\">CVE-2026-107098<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Royal Addons for Elementor<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09<\/td>\n<td>Royal Addons for Elementor 1.3.71 &#8211; 1.7.1069<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-107097\" target=\"_blank\" rel=\"noopener\">CVE-2026-107097<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Royal Addons for Elementor<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09<\/td>\n<td>Royal Addons for Elementor 1.3.68 &#8211; 1.7.1069<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-106647\" target=\"_blank\" rel=\"noopener\">CVE-2026-106647<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Royal Addons for Elementor<\/td>\n<td>\u4e2d<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u5bc4\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 1.7.1069<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-112865\" target=\"_blank\" rel=\"noopener\">CVE-2026-112865<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Royal Addons for Elementor<\/td>\n<td>\u4e2d<\/td>\n<td>\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09<\/td>\n<td>\u5bc4\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09<\/td>\n<td>\u2264 1.7.1068<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-111851\" target=\"_blank\" rel=\"noopener\">CVE-2026-111851<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>The Events Calendar<\/td>\n<td>\u4e2d<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u5bc4\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 6.18.1<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-110903\" target=\"_blank\" rel=\"noopener\">CVE-2026-110903<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Meta Box<\/td>\n<td>\u4e2d<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u80cc\u666f\u9805\u76ee\u306e\u914d\u5217\u306e\u30ad\u30fc\u7d4c\u7531\uff09<\/td>\n<td>\u2264 5.15.2<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-109216\" target=\"_blank\" rel=\"noopener\">CVE-2026-109216<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Meta Box<\/td>\n<td>\u4e2d<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099<\/td>\n<td>\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\uff08Missing Authorization\uff09<\/td>\n<td>\u2264 5.15.2<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-109700\" target=\"_blank\" rel=\"noopener\">CVE-2026-109700<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>SpeedyCache<\/td>\n<td>\u4e2d<\/td>\n<td>\u60c5\u5831\u6f0f\u3048\u3044<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u6a5f\u5bc6\u60c5\u5831\u306e\u9732\u51fa\uff08\u30ad\u30e3\u30c3\u30b7\u30e5\u66f8\u304d\u8fbc\u307f\u6642\u306b comment_author_* Cookie \u3092\u78ba\u8a8d\u3057\u306a\u3044\u4e0d\u9069\u5207\u306a\u30ad\u30e3\u30c3\u30b7\u30e5\u8a2d\u5b9a\u7d4c\u7531\uff09<\/td>\n<td>\u2264 1.4.2<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-104006\" target=\"_blank\" rel=\"noopener\">CVE-2026-104006<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>SureForms<\/td>\n<td>\u4e2d<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u5bc4\u7a3f\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 2.12.7<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-108495\" target=\"_blank\" rel=\"noopener\">CVE-2026-108495<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>WPForms<\/td>\n<td>\u4f4e<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u53cd\u5c04\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08iframe \u306e srcdoc \u5c5e\u6027\u5185\u306e\u30b9\u30de\u30fc\u30c8\u30bf\u30b0&#x27;query_var&#x27;\u7d4c\u7531\uff09<\/td>\n<td>\u2264 2.0.2.1<\/td>\n<td>5,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-101921\" target=\"_blank\" rel=\"noopener\">CVE-2026-101921<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Rank Math SEO<\/td>\n<td>\u4f4e<\/td>\n<td>SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u7ba1\u7406\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u2264 1.0.279<\/td>\n<td>4,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-104753\" target=\"_blank\" rel=\"noopener\">CVE-2026-104753<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Rank Math SEO<\/td>\n<td>\u4f4e<\/td>\n<td>\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u306e\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9<\/td>\n<td>\u7ba1\u7406\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u306e\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9<\/td>\n<td>\u2264 1.0.279<\/td>\n<td>4,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-104752\" target=\"_blank\" rel=\"noopener\">CVE-2026-104752<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Rank Math SEO<\/td>\n<td>\u4f4e<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u7ba1\u7406\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 1.0.279<\/td>\n<td>4,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-104754\" target=\"_blank\" rel=\"noopener\">CVE-2026-104754<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>All in One SEO<\/td>\n<td>\u4f4e<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u53cd\u5c04\u578b\u306eDOM\u30d9\u30fc\u30b9\u306e\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08URL\u306e\u30d1\u30b9\u7d4c\u7531\uff09<\/td>\n<td>\u2264 5.0.1.1<\/td>\n<td>2,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-85492\" target=\"_blank\" rel=\"noopener\">CVE-2026-85492<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Code Snippets<\/td>\n<td>\u4f4e<\/td>\n<td>SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u7ba1\u7406\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u2264 3.9.0<\/td>\n<td>1,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-106097\" target=\"_blank\" rel=\"noopener\">CVE-2026-106097<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Duplicator<\/td>\n<td>\u4f4e<\/td>\n<td>\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n<td>\u30de\u30eb\u30c1\u30b5\u30a4\u30c8\u306e\u30b5\u30d6\u30b5\u30a4\u30c8\u7ba1\u7406\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n<td>\u2264 1.5.17<\/td>\n<td>1,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-115251\" target=\"_blank\" rel=\"noopener\">CVE-2026-115251<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Essential Addons for Elementor<\/td>\n<td>\u4f4e<\/td>\n<td>\u6a29\u9650\u6607\u683c<\/td>\n<td>\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u8005\u306b\u3088\u308b&#x27;page_id&#x27; \u30d1\u30e9\u30e1\u30fc\u30bf\u3092\u60aa\u7528\u3057\u305f\u6a29\u9650\u6607\u683c\uff08Elementor \u306e\u30ea\u30d3\u30b8\u30e7\u30f3\u7d4c\u7531\uff09<\/td>\n<td>\u2264 6.8.7<\/td>\n<td>1,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-118205\" target=\"_blank\" rel=\"noopener\">CVE-2026-118205<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>EWWW Image Optimizer<\/td>\n<td>\u4f4e<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u53cd\u5c04\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08REQUEST_URI\u306e\u30d1\u30e9\u30e1\u30fc\u30bf\u306e\u30ad\u30fc\u7d4c\u7531\uff09<\/td>\n<td>\u2264 8.7.7<\/td>\n<td>1,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-92826\" target=\"_blank\" rel=\"noopener\">CVE-2026-92826<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Speed Optimizer<\/td>\n<td>\u4f4e<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u7ba1\u7406\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>Speed Optimizer &lt; 7.8.5<\/td>\n<td>1,000,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-111737\" target=\"_blank\" rel=\"noopener\">CVE-2026-111737<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Redux Framework<\/td>\n<td>\u4f4e<\/td>\n<td>\u6a29\u9650\u6607\u683c<\/td>\n<td>\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u6a29\u9650\u6607\u683c\uff08Users \u62e1\u5f35\u6a5f\u80fd\u7d4c\u7531\uff09<\/td>\n<td>\u2264 4.5.11<\/td>\n<td>900,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2025-14123\" target=\"_blank\" rel=\"noopener\">CVE-2025-14123<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Fluent Forms<\/td>\n<td>\u4f4e<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u53cd\u5c04\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u30a8\u30c7\u30a3\u30bf\u30fc\u306eSmartCode\u30d1\u30e9\u30e1\u30fc\u30bf&#x27;{get.*}&#x27;\u7d4c\u7531\uff09<\/td>\n<td>\u2264 6.2.14<\/td>\n<td>700,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-101324\" target=\"_blank\" rel=\"noopener\">CVE-2026-101324<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Backuply<\/td>\n<td>\u4f4e<\/td>\n<td>SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b2\u6b21\u7684\u306aSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\uff08Second-Order SQL Injection\uff09\uff08\u5fa9\u5143\u51e6\u7406\u306b\u3088\u308b\u6a29\u9650\u6607\u683c\u7d4c\u7531\uff09<\/td>\n<td>\u2264 1.5.8<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-93953\" target=\"_blank\" rel=\"noopener\">CVE-2026-93953<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>WP Statistics<\/td>\n<td>\u4f4e<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u53cd\u5c04\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08REQUEST_URI\u306e\u30af\u30a8\u30ea\u30d1\u30e9\u30e1\u30fc\u30bf\u306e\u30ad\u30fc\u7d4c\u7531\uff09<\/td>\n<td>\u2264 14.16.14<\/td>\n<td>600,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-97652\" target=\"_blank\" rel=\"noopener\">CVE-2026-97652<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Kirki<\/td>\n<td>\u4f4e<\/td>\n<td>PHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308bPHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306b\u3088\u308b\u7ba1\u7406\u8005\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u4e57\u3063\u53d6\u308a\uff08AJAX\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8&#x27;get-single-symbol&#x27;\u7d4c\u7531\uff09<\/td>\n<td>\u2264 6.2.5<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-75891\" target=\"_blank\" rel=\"noopener\">CVE-2026-75891<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Kirki<\/td>\n<td>\u4f4e<\/td>\n<td>PHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3<\/td>\n<td>\u7ba1\u7406\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308bPHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\uff08ZIP\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u306e\u30a4\u30f3\u30dd\u30fc\u30c8\u306b\u304a\u3051\u308b\u4fe1\u983c\u3067\u304d\u306a\u3044\u5165\u529b\u306e\u30c7\u30b7\u30ea\u30a2\u30e9\u30a4\u30ba\u7d4c\u7531\uff09<\/td>\n<td>\u2264 6.3.2<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-104734\" target=\"_blank\" rel=\"noopener\">CVE-2026-104734<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Kirki<\/td>\n<td>\u4f4e<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u30ab\u30b9\u30bf\u30e0\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\uff08\u30da\u30fc\u30b8\u30d3\u30eb\u30c0\u30fc\u306e\u30c6\u30ad\u30b9\u30c8\u30b3\u30f3\u30c6\u30f3\u30c4\u7d4c\u7531\uff09<\/td>\n<td>\u2264 6.2.0<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-14572\" target=\"_blank\" rel=\"noopener\">CVE-2026-14572<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>Kirki<\/td>\n<td>\u4f4e<\/td>\n<td>\u30b5\u30fc\u30d0\u30fc\u30b5\u30a4\u30c9\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09<\/td>\n<td>\u7de8\u96c6\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u30b5\u30fc\u30d0\u30fc\u30b5\u30a4\u30c9\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09<\/td>\n<td>\u2264 6.3.1<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-84224\" target=\"_blank\" rel=\"noopener\">CVE-2026-84224<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>MailPoet<\/td>\n<td>\u4f4e<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u53cd\u5c04\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>MailPoet &lt; 5.14.2<\/td>\n<td>500,000+<\/td>\n<td>&#8211;<\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<tr>\n<td>WP Statistics<\/td>\n<td>\u4f4e<\/td>\n<td>\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u53cd\u5c04\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09<\/td>\n<td>\u2264 14.16.14<\/td>\n<td>500,000+<\/td>\n<td><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-97276\" target=\"_blank\" rel=\"noopener\">CVE-2026-97276<\/a><\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>2026\u5e7410\u6708\u5ea6\u306f\u5408\u8a08414\u4ef6\u306e\u8106\u5f31\u6027\u304c\u5831\u544a\u3055\u308c\u3066\u304a\u308a\u3001\u3053\u306e\u3046\u3061187\u4ef6\u3092\u63b2\u8f09\u3057\u3066\u3044\u307e\u3059\u3002\u63b2\u8f09\u57fa\u6e96\u306b\u6e80\u305f\u306a\u3044227\u4ef6\u306f\u3001\u4ee5\u4e0b\u306e\u53c2\u7167\u5143\u3067\u3054\u78ba\u8a8d\u304f\u3060\u3055\u3044\u3002<\/p>\n<p>\u8106\u5f31\u6027\u60c5\u5831\u53c2\u7167\u5143\uff1a<a href=\"https:\/\/blog.sucuri.net\/2026\/10\/vulnerability-patch-roundup-october-2026.html\" target=\"_blank\" rel=\"noopener noreferrer\">Vulnerability &amp; Patch Roundup\uff5cSUCURi BLOG<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>2026\u5e7410\u6708\u306f\u3001PHP\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cPHP2Shell\u300d\u304c\u516c\u8868\u3055\u308c\u307e\u3057\u305f\u3002SEO\u30d7\u30e9\u30b0\u30a4\u30f3\u300cRank Math SEO PRO\u300d\u3078\u306e\u30de\u30eb\u30a6\u30a7\u30a2\u6df7\u5165\u3068\u300112\u6708\u516c\u958b\u4e88\u5b9a\u306eWordPress 7.2\u306e\u30d9\u30fc\u30bf\u7248\u3082\u3042\u308f\u305b\u3066\u89e3\u8aac\u3057\u307e\u3059\u3002<\/p>\n","protected":false},"author":3,"featured_media":8246,"parent":0,"menu_order":0,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[],"class_list":["post-8244","knowledge","type-knowledge","status-publish","format-standard","has-post-thumbnail","hentry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.9 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"\u571f\u4e95 \u7d14\u4e5f\"\/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.9\" \/>\n\t\t<meta property=\"og:locale\" content=\"ja_JP\" \/>\n\t\t<meta property=\"og:site_name\" content=\"wp.geek | wp.geek\u3067\u306fWordPress\u306b\u95a2\u3059\u308b\u69d8\u3005\u306a\u60c5\u5831\u3092\u767a\u4fe1\u3057\u307e\u3059\u3002\u30ef\u30fc\u30c9\u30d7\u30ec\u30b9\u3067\u306e\u30b5\u30a4\u30c8\u5236\u4f5c\u306b\u643a\u308f\u308b\u5168\u3066\u306e\u65b9\u306b\u5f79\u7acb\u3064\u60c5\u5831\u3092\u3054\u63d0\u4f9b\u3057\u3066\u3044\u304d\u307e\u3059\u3002\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\u30102026\u5e7410\u6708\u3011WordPress\u8106\u5f31\u6027\u60c5\u5831\uff06\u6ce8\u76ee\u30cb\u30e5\u30fc\u30b9 \u307e\u3068\u3081\uff5cPHP\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cPHP2Shell\u300d\uff1aWordPress\u30b5\u30a4\u30c8\u3082\u4eca\u3059\u3050PHP\u306e\u66f4\u65b0\u3092 | wp.geek\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/wpmake.jp\/contents\/wp-content\/uploads\/2026\/11\/202610wp-news-thumn.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/wpmake.jp\/contents\/wp-content\/uploads\/2026\/11\/202610wp-news-thumn.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t\t<meta property=\"og:image:height\" content=\"683\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-11-04T04:34:39+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-11-06T02:43:35+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"\u30102026\u5e7410\u6708\u3011WordPress\u8106\u5f31\u6027\u60c5\u5831\uff06\u6ce8\u76ee\u30cb\u30e5\u30fc\u30b9 \u307e\u3068\u3081\uff5cPHP\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cPHP2Shell\u300d\uff1aWordPress\u30b5\u30a4\u30c8\u3082\u4eca\u3059\u3050PHP\u306e\u66f4\u65b0\u3092 | wp.geek\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/wpmake.jp\/contents\/wp-content\/uploads\/2026\/11\/202610wp-news-thumn.jpg\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\u30102026\u5e7410\u6708\u3011WordPress\u8106\u5f31\u6027\u60c5\u5831\uff06\u6ce8\u76ee\u30cb\u30e5\u30fc\u30b9 \u307e\u3068\u3081\uff5cPHP\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cPHP2Shell\u300d\uff1aWordPress\u30b5\u30a4\u30c8\u3082\u4eca\u3059\u3050PHP\u306e\u66f4\u65b0\u3092 | wp.geek","description":"","canonical_url":false,"robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ja_JP","og:site_name":"wp.geek | wp.geek\u3067\u306fWordPress\u306b\u95a2\u3059\u308b\u69d8\u3005\u306a\u60c5\u5831\u3092\u767a\u4fe1\u3057\u307e\u3059\u3002\u30ef\u30fc\u30c9\u30d7\u30ec\u30b9\u3067\u306e\u30b5\u30a4\u30c8\u5236\u4f5c\u306b\u643a\u308f\u308b\u5168\u3066\u306e\u65b9\u306b\u5f79\u7acb\u3064\u60c5\u5831\u3092\u3054\u63d0\u4f9b\u3057\u3066\u3044\u304d\u307e\u3059\u3002","og:type":"article","og:title":"\u30102026\u5e7410\u6708\u3011WordPress\u8106\u5f31\u6027\u60c5\u5831\uff06\u6ce8\u76ee\u30cb\u30e5\u30fc\u30b9 \u307e\u3068\u3081\uff5cPHP\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cPHP2Shell\u300d\uff1aWordPress\u30b5\u30a4\u30c8\u3082\u4eca\u3059\u3050PHP\u306e\u66f4\u65b0\u3092 | wp.geek","og:image":"https:\/\/wpmake.jp\/contents\/wp-content\/uploads\/2026\/11\/202610wp-news-thumn.jpg","og:image:secure_url":"https:\/\/wpmake.jp\/contents\/wp-content\/uploads\/2026\/11\/202610wp-news-thumn.jpg","og:image:width":1024,"og:image:height":683,"article:published_time":"2026-11-04T04:34:39+00:00","article:modified_time":"2026-11-06T02:43:35+00:00","twitter:card":"summary_large_image","twitter:title":"\u30102026\u5e7410\u6708\u3011WordPress\u8106\u5f31\u6027\u60c5\u5831\uff06\u6ce8\u76ee\u30cb\u30e5\u30fc\u30b9 \u307e\u3068\u3081\uff5cPHP\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cPHP2Shell\u300d\uff1aWordPress\u30b5\u30a4\u30c8\u3082\u4eca\u3059\u3050PHP\u306e\u66f4\u65b0\u3092 | wp.geek","twitter:image":"https:\/\/wpmake.jp\/contents\/wp-content\/uploads\/2026\/11\/202610wp-news-thumn.jpg"},"aioseo_meta_data":{"post_id":"8244","title":null,"description":null,"keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"WebPage","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"limit_modified_date":false,"created":"2026-11-04 04:11:32","updated":"2026-11-06 02:43:35","ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":{"subject":"","preview":"","content":""},"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"breadcrumb_settings":null,"seo_analyzer_scan_date":null},"_links":{"self":[{"href":"https:\/\/wpmake.jp\/contents\/wp-json\/wp\/v2\/knowledge\/8244","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wpmake.jp\/contents\/wp-json\/wp\/v2\/knowledge"}],"about":[{"href":"https:\/\/wpmake.jp\/contents\/wp-json\/wp\/v2\/types\/knowledge"}],"author":[{"embeddable":true,"href":"https:\/\/wpmake.jp\/contents\/wp-json\/wp\/v2\/users\/3"}],"version-history":[{"count":2,"href":"https:\/\/wpmake.jp\/contents\/wp-json\/wp\/v2\/knowledge\/8244\/revisions"}],"predecessor-version":[{"id":8247,"href":"https:\/\/wpmake.jp\/contents\/wp-json\/wp\/v2\/knowledge\/8244\/revisions\/8247"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wpmake.jp\/contents\/wp-json\/wp\/v2\/media\/8246"}],"wp:attachment":[{"href":"https:\/\/wpmake.jp\/contents\/wp-json\/wp\/v2\/media?parent=8244"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wpmake.jp\/contents\/wp-json\/wp\/v2\/categories?post=8244"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}