{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2026-110701", "aliases": [], "title": "CP Multi View Events Calendar：ブラウザー上での不正な処理", "summary": "CP Multi View Events Calendarにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "CP Multi View Events Calendar", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "CP Multi View Events Calendar", "range": "<= 1.4.42" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110701", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/cp-multi-view-calendar/tags/1.4.42/DC_MultiViewCal/src/Plugins/jquery.calendar.js#L2689", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/cp-multi-view-calendar/tags/1.4.42/cp-multi-view-calendar.php#L32", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/cp-multi-view-calendar/tags/1.4.42/php/datafeed.php#L23", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/cp-multi-view-calendar/tags/1.4.42/php/datafeed.php#L340", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/cp-multi-view-calendar/tags/1.4.42/php/datafeed.php#L89", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3748683/cp-multi-view-calendar/trunk/DC_MultiViewCal/src/Plugins/jquery.calendar.js", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/log/cp-multi-view-calendar/", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/12f2d3d3-4cc1-4569-9183-62f4841e72f7?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T07:17:11.643Z", "modifiedAt": "2026-10-16T15:17:11.770Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The CP Multi View Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'CalendarTitle' parameter in all versions up to, and including, 1.4.42 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires that an administrator has enabled the \"Allow edition in frontend?\" option on at least one calendar view, which exposes the unauthenticated add endpoint and a publicly accessible nonce.", "sourceTitle": "CVE-2026-110701", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "codepeople", "product": "CP Multi View Events Calendar", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "1.4.42", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:11.770Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-110664", "aliases": [], "title": "Premium Packages – Sell Digital Products Securely：ブラウザー上での不正な処理", "summary": "Premium Packages – Sell Digital Products Securelyにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "Premium Packages – Sell Digital Products Securely", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.4, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "Premium Packages – Sell Digital Products Securely", "range": "<= 7.2.8" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110664", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/wpdm-premium-packages/", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wpdm-premium-packages/tags/7.2.8/src/Admin/Order/views/order-notes.php#L28", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wpdm-premium-packages/tags/7.2.8/src/Api/Endpoints/OrderEndpoint.php#L101", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wpdm-premium-packages/tags/7.2.8/src/Api/Endpoints/OrderEndpoint.php#L501", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wpdm-premium-packages/tags/7.2.8/src/Order/OrderService.php#L700", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3747528/wpdm-premium-packages/trunk/src/Admin/Order/views/order-notes.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/20042ecf-a8fd-4b36-80d9-d338c8795433?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T07:17:11.490Z", "modifiedAt": "2026-10-16T15:17:11.657Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'note' parameter in all versions up to, and including, 7.2.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The exploit bypasses tag-based filtering because the payload is stored as a hex-escaped sequence (e.g., \\x3cimg onerror=...\\x3e) that sanitize_textarea_field does not strip, and is only decoded back into a live HTML tag by stripcslashes() during admin rendering — after all sanitization has occurred.", "sourceTitle": "CVE-2026-110664", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "codename065", "product": "Premium Packages – Sell Digital Products Securely", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "7.2.8", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:11.657Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-110290", "aliases": [], "title": "WebberZone Top 10 — Popular Posts：ブラウザー上での不正な処理", "summary": "WebberZone Top 10 — Popular Postsにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "WebberZone Top 10 — Popular Posts", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.4, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "WebberZone Top 10 — Popular Posts", "range": "<= 4.5.2" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110290", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/top-10/tags/4.5.2/includes/frontend/blocks/class-blocks.php#L128", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/top-10/tags/4.5.2/includes/frontend/blocks/class-blocks.php#L142", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/top-10/tags/4.5.2/includes/frontend/class-display.php#L153", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/top-10/tags/4.5.2/includes/frontend/class-display.php#L170", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/top-10/tags/4.5.2/includes/util/class-helpers.php#L693", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/top-10/tags/4.5.3/includes/frontend/class-display.php", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3747022", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4db4a201-a7fa-4764-87cb-c54b64adf560?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T07:17:11.183Z", "modifiedAt": "2026-10-16T15:17:10.957Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The WebberZone Top 10 — Popular Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'other_attributes (parsed to inject instance_id) + undeclared is_widget' parameter in all versions up to, and including, 4.5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The exploit requires setting the undeclared is_widget flag to '1' via block JSON, which activates the vulnerable code path that concatenates the attacker-controlled instance_id value into an unescaped HTML class attribute.", "sourceTitle": "CVE-2026-110290", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "ajay", "product": "WebberZone Top 10 — Popular Posts", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "4.5.2", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:10.957Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-110252", "aliases": [], "title": "WPeMatico RSS Feed Fetcher：ブラウザー上での不正な処理", "summary": "WPeMatico RSS Feed Fetcherにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "WPeMatico RSS Feed Fetcher", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 5.4, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "WPeMatico RSS Feed Fetcher", "range": "<= 2.9" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110252", "label": "NVDの原文" }, { "url": "https://github.com/etruel/wpematico/commit/44c4894a0ad92a711c534ad4d822c0b5d7c3dffe", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wpematico/tags/2.9/includes/campaign_fetch.php#L400", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wpematico/tags/2.9/includes/campaign_fetch.php#L773", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wpematico/tags/2.9/includes/campaign_fetch.php#L777", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wpematico/tags/2.9/includes/wpematico_functions.php#L3226", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wpematico/tags/2.9/includes/wpematico_functions.php#L3326", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3747465/wpematico/trunk/includes/campaign_fetch.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e87fc1bf-af05-4089-a164-8a2e73c68e8c?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T07:17:11.030Z", "modifiedAt": "2026-10-16T15:17:10.490Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.9 This is due to the plugin removing WordPress's wp_filter_post_kses filter from content_save_pre immediately before calling wp_insert_post() with RSS feed content, whenever the campaign's last editor had the unfiltered_html capability — a flag the plugin sets automatically for every admin-saved campaign. Imported item content is taken raw from $item->get_content(), only entity-decoded, and stored verbatim in post_content. This makes it possible for unauthenticated attackers, who publish or compromise an RSS feed that an administrator has subscribed a WPeMatico campaign to, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected imported post.", "sourceTitle": "CVE-2026-110252", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "etruel", "product": "WPeMatico RSS Feed Fetcher", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "2.9", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:10.490Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-110191", "aliases": [], "title": "Product Delivery Date for WooCommerce：脆弱性情報", "summary": "Product Delivery Date for WooCommerceに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Product Delivery Date for WooCommerce", "category": "wordpress", "component": "plugin", "severity": "low", "cvss": 2.7, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "affected": [ { "product": "Product Delivery Date for WooCommerce", "range": "< 3.3.2" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110191", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/d7310c1a-f858-4dc5-8102-813fb64096a6/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-16T07:17:10.920Z", "modifiedAt": "2026-10-16T15:17:10.030Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Product Delivery Date for WooCommerce WordPress plugin before 3.3.2 does not perform a capability check before disclosing order details through its calendar view AJAX actions, allowing users with a role as low as Contributor to view other customers' order information.", "sourceTitle": "CVE-2026-110191", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Product Delivery Date for WooCommerce", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThan": "3.3.2", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:10.030Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-110179", "aliases": [], "title": "affiliate-toolkit：データベースへの不正操作", "summary": "affiliate-toolkitにデータベースへの不正操作に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "データベースに不正な命令を送られ、情報の閲覧や変更につながる可能性があります。", "product": "affiliate-toolkit", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.8, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "affected": [ { "product": "affiliate-toolkit", "range": "< 3.8.9" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110179", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/fed6e817-c046-4749-b594-4ff12240f666/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-16T07:17:10.807Z", "modifiedAt": "2026-10-16T15:17:09.840Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The affiliate-toolkit WordPress plugin before 3.8.9 does not validate a user-supplied sort value against an allowlist before using it in a database query, and the affected administrative list screen requires only a lower-privilege capability rather than an administrator one, so users with editor-level access and above can perform SQL injection and read arbitrary information from the database. On multisite a sub-site editor can read the network-global users table, including the super administrator's password hash.", "sourceTitle": "CVE-2026-110179", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "affiliate-toolkit", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThan": "3.8.9", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:09.840Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-110135", "aliases": [], "title": "OTP Login & Register Woocommerce：脆弱性情報", "summary": "OTP Login & Register Woocommerceに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "OTP Login & Register Woocommerce", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.4, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "affected": [ { "product": "OTP Login & Register Woocommerce", "range": "< 2.7.3" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110135", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/73f0e85d-c145-4048-9fbd-20308d163b87/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-16T07:17:10.683Z", "modifiedAt": "2026-10-16T15:17:09.643Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The OTP Login & Register Woocommerce WordPress plugin before 2.7.3 does not adequately limit one-time-password verification attempts, because the attempt limit is tracked against a value the client itself supplies and can change freely, allowing an unauthenticated attacker to bypass the limit and brute-force the short numeric login code to take over an account without its password.", "sourceTitle": "CVE-2026-110135", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "OTP Login & Register Woocommerce", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThan": "2.7.3", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:09.643Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-110039", "aliases": [], "title": "Smush：脆弱性情報", "summary": "Smushに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Smush", "category": "wordpress", "component": "plugin", "severity": "low", "cvss": 2.7, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N", "affected": [ { "product": "Smush", "range": "< 4.3.4" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110039", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/4f27b2fd-1b27-4274-85c5-f19e6998aa44/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-16T07:17:10.573Z", "modifiedAt": "2026-10-16T15:17:09.443Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Smush WordPress plugin before 4.3.4 does not restrict changes to a network-wide access setting to network administrators, allowing an administrator of a single site on a multisite network to change it for the entire network.", "sourceTitle": "CVE-2026-110039", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Smush", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThan": "4.3.4", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:09.443Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-110015", "aliases": [], "title": "Salon Booking System：脆弱性情報", "summary": "Salon Booking Systemに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Salon Booking System", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 8.8, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "affected": [ { "product": "Salon Booking System", "range": "< 10.31.9" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110015", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/755ad5f7-44bb-45a9-9de2-f280586deaa3/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-16T07:17:10.470Z", "modifiedAt": "2026-10-16T15:17:09.097Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API requests and discards WordPress core's nonce check for cookie-authenticated sessions across the whole REST API, allowing unauthenticated attackers who trick a logged-in administrator into clicking a crafted link to forge requests in that administrator's browser, up to creating a new administrator account.", "sourceTitle": "CVE-2026-110015", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Salon Booking System", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThan": "10.31.9", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:09.097Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-110014", "aliases": [], "title": "Salon Booking System：脆弱性情報", "summary": "Salon Booking Systemに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Salon Booking System", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 5.3, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "affected": [ { "product": "Salon Booking System", "range": "< 10.31.9" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110014", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/91598659-022c-4e04-ad16-399e11081053/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-16T07:17:10.363Z", "modifiedAt": "2026-10-16T15:17:08.957Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization before creating a booking and trusts a caller-supplied user identifier and booking status, allowing unauthenticated attackers to create bookings attributed to arbitrary users, overwrite those users' stored contact details, and mark bookings as paid or confirmed without any payment.", "sourceTitle": "CVE-2026-110014", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Salon Booking System", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThan": "10.31.9", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:08.957Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-110013", "aliases": [], "title": "Salon Booking System：脆弱性情報", "summary": "Salon Booking Systemに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Salon Booking System", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 4.8, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "affected": [ { "product": "Salon Booking System", "range": "< 10.31.9" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110013", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/613ddaa0-a44f-4dd7-b679-ba1319e15ca1/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-16T07:17:10.253Z", "modifiedAt": "2026-10-16T15:17:08.820Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a secure random source, instead deriving them from a value hardcoded in the Salon Booking System WordPress plugin before 10.31.9 and the second at which a token was issued. An attacker able to constrain when a staff or administrator token was issued can compute a valid token and access the booking API as that user, including an administrator.", "sourceTitle": "CVE-2026-110013", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Salon Booking System", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThan": "10.31.9", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:08.820Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-110012", "aliases": [], "title": "Salon Booking System：脆弱性情報", "summary": "Salon Booking Systemに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Salon Booking System", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 4.3, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "affected": [ { "product": "Salon Booking System", "range": "< 10.31.3" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110012", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/7253eae4-4759-4388-8120-500b9d7352c4/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-16T07:17:10.140Z", "modifiedAt": "2026-10-16T15:17:08.673Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Salon Booking System WordPress plugin before 10.31.3 does not restrict several of its booking REST API routes to users with the appropriate capability, allowing any authenticated user such as a subscriber to read every customer's booking records, including their personal data.", "sourceTitle": "CVE-2026-110012", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Salon Booking System", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThan": "10.31.3", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:08.673Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-109982", "aliases": [], "title": "MB Custom Post Types & Custom Taxonomies：脆弱性情報", "summary": "MB Custom Post Types & Custom Taxonomiesに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "MB Custom Post Types & Custom Taxonomies", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 4.2, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L", "affected": [ { "product": "MB Custom Post Types & Custom Taxonomies", "range": "< 2.12.2" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109982", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/27787d4e-1633-4eb6-bcf4-0a8586df3d47/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-16T07:17:10.030Z", "modifiedAt": "2026-10-16T15:17:08.307Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.2 does not perform a capability check or validate a nonce on its migration actions, allowing any authenticated user, such as a subscriber, to trigger a one-way migration that creates published records and permanently deletes a companion MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.2's entire post-type and taxonomy configuration.", "sourceTitle": "CVE-2026-109982", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "MB Custom Post Types & Custom Taxonomies", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThan": "2.12.2", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:08.307Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-109401", "aliases": [], "title": "WP Mail Logging：情報の漏えい", "summary": "WP Mail Loggingに情報の漏えいに関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来公開しない情報を読み取られる可能性があります。", "product": "WP Mail Logging", "category": "wordpress", "component": "plugin", "severity": "low", "cvss": 2.7, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "affected": [ { "product": "WP Mail Logging", "range": "<= 1.17.0" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109401", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/wp-mail-logging/tags/1.17.0/lib/vendor/brandonwamboldt/wp-orm/src/Query.php#L399", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wp-mail-logging/tags/1.17.0/src/WPML_PrivacyController.php#L76", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wp-mail-logging/tags/1.17.0/src/WPML_PrivacyController.php#L82", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3746095/wp-mail-logging/trunk/src/WPML_PrivacyController.php?old=3464813&old_path=wp-mail-logging%2Ftrunk%2Fsrc%2FWPML_PrivacyController.php", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&new=3746095%40wp-mail-logging%2Ftags%2F1.17.1&old=3705796%40wp-mail-logging%2Ftags%2F1.17.0", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f2b96f36-090d-4ed3-aa2c-dafa89d255cc?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T07:17:09.887Z", "modifiedAt": "2026-10-16T15:17:07.347Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The WP Mail Logging plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.17.0 via the 'email_address' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to extract complete logged mail rows belonging to other users — including recipient addresses, message subjects, full message bodies, and any URLs contained therein — whose addresses happen to match the wildcard. Exploitation requires an administrator to process a personal-data export request for the attacker's email address via the standard WordPress privacy workflow, and the attacker's address must contain a LIKE wildcard character (such as an underscore) that matches at least one other user's address in the mail log.", "sourceTitle": "CVE-2026-109401", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "smub", "product": "WP Mail Logging", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "1.17.0", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:07.347Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-109388", "aliases": [], "title": "HivePress – Business Directory, Listings & Classified Ads Plugin：ブラウザー上での不正な処理", "summary": "HivePress – Business Directory, Listings & Classified Ads Pluginにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "HivePress – Business Directory, Listings & Classified Ads Plugin", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.4, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "HivePress – Business Directory, Listings & Classified Ads Plugin", "range": "<= 1.7.32" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109388", "label": "NVDの原文" }, { "url": "https://github.com/hivepress/hivepress/pull/374/changes/508b1766beb79949ab22dd4a163fafadb4c63e7d", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/assets/js/common.js#L1278", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/blocks/class-form.php#L89", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/components/class-editor.php#L417", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/forms/class-form.php#L189", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&new=3747070%40hivepress%2Ftags%2F1.8.0&old=3732142%40hivepress%2Ftags%2F1.7.32", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5d1937ae-d350-452c-b20e-d85bc88dbe48?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T07:17:09.730Z", "modifiedAt": "2026-10-16T15:17:07.240Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 1.7.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that the site administrator has enabled user listing submission, and the script executes in the victim's browser at the moment of successful login via the embedded form on the attacker's listing page.", "sourceTitle": "CVE-2026-109388", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "hivepress", "product": "HivePress – Business Directory, Listings & Classified Ads Plugin", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "1.7.32", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:07.240Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-109382", "aliases": [], "title": "WSP MCP – Free MCP Plugin for WordPress: Connect Claude, ChatGPT & AI Agents：情報の漏えい", "summary": "WSP MCP – Free MCP Plugin for WordPress: Connect Claude, ChatGPT & AI Agentsに情報の漏えいに関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来公開しない情報を読み取られる可能性があります。", "product": "WSP MCP – Free MCP Plugin for WordPress: Connect Claude, ChatGPT & AI Agents", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "WSP MCP – Free MCP Plugin for WordPress: Connect Claude, ChatGPT & AI Agents", "range": "<= 2.9.5" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109382", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/wsp-mcp-ai-agents-connector/tags/2.9.5/includes/abilities/posts.php#L7", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wsp-mcp-ai-agents-connector/tags/2.9.5/includes/server/class-auth.php#L123", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wsp-mcp-ai-agents-connector/tags/2.9.5/includes/server/class-auth.php#L59", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wsp-mcp-ai-agents-connector/tags/2.9.5/includes/server/class-mcp-server.php#L78", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wsp-mcp-ai-agents-connector/tags/2.9.5/includes/tools/native-tools.php#L42", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&old=3743711%40wsp-mcp-ai-agents-connector&new=3743711%40wsp-mcp-ai-agents-connector", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/809eb78f-fd8e-4434-a36b-bb8e313cf264?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T07:17:09.573Z", "modifiedAt": "2026-10-16T15:17:07.133Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wsp_get_posts MCP tool being registered with an empty capability requirement while the MCP endpoint's authenticate() method accepts any logged-in user, and the wsp_execute_get_posts() callback honouring a caller-supplied status=all argument that expands into a WP_Query over 'publish', 'draft', 'pending' and 'future' posts with no author or ownership filter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the titles, URLs, authors, categories, tags and 40-word excerpts of every unpublished (draft/pending/scheduled) post on the site.", "sourceTitle": "CVE-2026-109382", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "bilalnaseer", "product": "WSP MCP – Free MCP Plugin for WordPress: Connect Claude, ChatGPT & AI Agents", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "2.9.5", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:07.133Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-109193", "aliases": [], "title": "HivePress – Business Directory, Listings & Classified Ads Plugin：ブラウザー上での不正な処理", "summary": "HivePress – Business Directory, Listings & Classified Ads Pluginにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "HivePress – Business Directory, Listings & Classified Ads Plugin", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "HivePress – Business Directory, Listings & Classified Ads Plugin", "range": "<= 1.7.32" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109193", "label": "NVDの原文" }, { "url": "https://github.com/hivepress/hivepress/pull/375/changes/60df383473ff4b7a85f24b06895ec236edf20c9d", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/components/class-attribute.php#L1199", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/components/class-attribute.php#L1293", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/controllers/class-user.php#L292", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/fields/class-field.php#L572", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/fields/class-text.php#L197", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/fields/class-text.php#L214", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3747070/hivepress/trunk/includes/fields/class-field.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d2c3752b-0d2f-402d-bdbf-fb3fd76cf558?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T07:17:09.417Z", "modifiedAt": "2026-10-16T15:17:06.587Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' (e.g. hp_custom_link)' parameter in all versions up to, and including, 1.7.32 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that an administrator has configured a custom user attribute with a display_format template placing the %value% token inside an href, src, or style attribute context, which is a documented and expected use of the plugin's attribute display feature.", "sourceTitle": "CVE-2026-109193", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "hivepress", "product": "HivePress – Business Directory, Listings & Classified Ads Plugin", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "1.7.32", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:06.587Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-107770", "aliases": [], "title": "Photo Engine (Media Organizer & Lightroom)：脆弱性情報", "summary": "Photo Engine (Media Organizer & Lightroom)に脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Photo Engine (Media Organizer & Lightroom)", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.8, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H", "affected": [ { "product": "Photo Engine (Media Organizer & Lightroom)", "range": "<= 6.5.6" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107770", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/admin.php#L155", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/admin.php#L56", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/api.php#L116", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/api.php#L201", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/api.php#L309", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/api.php#L32", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/core.php#L923", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3737477/wplr-sync", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3737477/wplr-sync/trunk/classes/api.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2f32c361-9bb3-417b-a5a9-02e48bfa33b4?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T07:17:09.253Z", "modifiedAt": "2026-10-16T15:17:05.870Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.5.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete arbitrary media attachments via wp_delete_attachment and upload new attachments to the site, actions that require the upload_files or edit_others_posts capabilities. A Subscriber-level user can obtain their own wplr_auth_token directly from the profile.php page source, because the admin screen guard in Meow_WPLR_Sync_Admin::__construct() is commented out, causing wp_localize_script to leak the token into every admin page view; this token can then be used from a cookie-less HTTP session to invoke destructive actions on the /?wplr-sync-api endpoint.", "sourceTitle": "CVE-2026-107770", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "tigroumeow", "product": "Photo Engine (Media Organizer & Lightroom)", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "6.5.6", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:05.870Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-107768", "aliases": [], "title": "TranslatePress – Translate Multilingual sites with AI Translation：ブラウザー上での不正な処理", "summary": "TranslatePress – Translate Multilingual sites with AI Translationにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "TranslatePress – Translate Multilingual sites with AI Translation", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "TranslatePress – Translate Multilingual sites with AI Translation", "range": "<= 3.3.7" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107768", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.7/includes/class-translation-render.php#L1355", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.7/includes/class-translation-render.php#L1655", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.7/includes/class-translation-render.php#L835", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3744262/translatepress-multilingual/trunk/includes/class-translation-render.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5e9733d3-4097-4785-947c-db90a38795b3?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T07:17:09.103Z", "modifiedAt": "2026-10-16T15:17:05.770Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 3.3.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires the target site to allow unmoderated comment submission on at least one post and to have a secondary language configured — both conditions reflect TranslatePress's primary use case.", "sourceTitle": "CVE-2026-107768", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "cozmoslabs", "product": "TranslatePress – Translate Multilingual sites with AI Translation", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "3.3.7", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:05.770Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-107646", "aliases": [], "title": "HUSKY – Products Filter for WooCommerce Professional：情報の漏えい", "summary": "HUSKY – Products Filter for WooCommerce Professionalに情報の漏えいに関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来公開しない情報を読み取られる可能性があります。", "product": "HUSKY – Products Filter for WooCommerce Professional", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 5.3, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "affected": [ { "product": "HUSKY – Products Filter for WooCommerce Professional", "range": "<= 1.4.5" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107646", "label": "NVDの原文" }, { "url": "https://plugins.svn.wordpress.org/woocommerce-products-filter/trunk/ext/turbo_mode/index.php", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/woocommerce-products-filter/trunk/ext/stat/views/tabs_content.php#L292", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/woocommerce-products-filter/trunk/ext/turbo_mode/index.php#L177", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/woocommerce-products-filter/trunk/ext/turbo_mode/index.php#L187", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/woocommerce-products-filter/trunk/ext/turbo_mode/index.php#L93", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1186aca4-012b-4512-9ab3-166b9f84d725?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T07:17:08.940Z", "modifiedAt": "2026-10-16T15:17:05.130Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.5 via the 'woof_settings[woof_stat][server_options]' parameter. This makes it possible for unauthenticated attackers to extract the external MySQL host, database name, username, and plaintext password stored in woof_settings[woof_stat][server_options] from the inline woof_tm_data script object on any public frontend filter page. This is only exploitable when an administrator has enabled the Statistics extension, saved external MySQL connection credentials, and enabled Turbo Mode — all supported, documented plugin configurations.", "sourceTitle": "CVE-2026-107646", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "realmag777", "product": "HUSKY – Products Filter for WooCommerce Professional", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "1.4.5", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:05.130Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] } ], "total": 328, "limit": 20, "offset": 200, "filters": { "product": "wordpress", "type": "all", "q": "", "page": 11 }, "pagination": { "page": 11, "pageSize": 20, "totalPages": 17 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-23T02:17:50.489Z", "lastAttempt": "2026-10-23T02:17:50.489Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "error", "lastSuccess": "2026-10-22T22:18:00.744Z", "lastAttempt": "2026-10-23T02:17:50.489Z", "error": "GitHub API取得上限に到達 (2026-10-23T02:55:02.000Z以降に再取得)", "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "stale", "stale": true }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-23T02:17:50.489Z", "lastAttempt": "2026-10-23T02:17:50.489Z", "error": null, "recordCount": 1754, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "ok", "lastSuccess": "2026-10-23T02:17:50.489Z", "lastAttempt": "2026-10-23T02:17:50.489Z", "error": null, "recordCount": 0, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-23T01:02:50.760Z 〜 2026-10-23T02:17:50.489Z、全製品の変更 30/30件まで確認、対象0件反映。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-23T02:17:50.489Z", "lastAttempt": "2026-10-23T02:17:50.489Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。 PHP公式ニュース経由で候補補足（先頭20項目から2件）。GitHub全件代替ではない。CVE取得は既存候補と合わせ最大6件。", "cursor": null, "freshness": "fresh", "stale": false } ] }