{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2026-14826", "aliases": [], "title": "Quiz and Survey Master (QSM)：脆弱性情報", "summary": "Quiz and Survey Master (QSM) の WordPress プラグインはバージョン 11.2.4 未満で、REST ルートがクイズのメール通知および結果ページ設定を返す際に、オブジェクトごとの所有権チェックを行わない。そのため、貢献者レベル以上の権限を持つユーザーは、他のユーザーが作成したクイズの設定（通知先メールアドレスなど）を読むことができる。", "risk": "攻撃者は他のユーザーが作成したクイズのメール通知先アドレスなどの設定情報を取得できる。", "product": "Quiz and Survey Master (QSM)", "category": "wordpress", "component": "plugin", "severity": "low", "cvss": 2.7, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "affected": [ { "product": "Quiz and Survey Master (QSM)", "range": "< 11.2.4" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-14826", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/bb9cac20-4df5-4834-89f0-746a5eab20ea/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14826", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:15.994Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:46.331Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check on the REST routes that return a quiz's email-notification and results-page configuration, allowing users with contributor-level access and above to read the configuration, including notification recipient addresses, of quizzes created by other users.", "sourceTitle": "Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Quiz and Survey Master (QSM)", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThan": "11.2.4" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-14826", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json", "fetchedAt": "2026-10-23T02:43:46.331Z", "publishedAt": "2026-08-19T06:00:15.994Z", "modifiedAt": "2026-08-19T13:14:55.802Z", "state": "published", "provider": "WPScan", "title": "Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR", "descriptions": [ { "lang": "en", "value": "The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check on the REST routes that return a quiz's email-notification and results-page configuration, allowing users with contributor-level access and above to read the configuration, including notification recipient addresses, of quizzes created by other users.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "Quiz and Survey Master (QSM)", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "11.2.4", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-639 Authorization Bypass Through User-Controlled Key", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "baseScore": 2.7, "baseSeverity": "LOW", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/bb9cac20-4df5-4834-89f0-746a5eab20ea/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"Quiz and Survey Master (QSM)\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"11.2.4\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check on the REST routes that return a quiz's email-notification and results-page configuration, allowing users with contributor-level access and above to read the configuration, including notification recipient addresses, of quizzes created by other users.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-639 Authorization Bypass Through User-Controlled Key\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":2.7,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"LOW\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N\",\"integrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"HIGH\",\"confidentialityImpact\":\"LOW\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T13:14:55.802Z", "fetchedAt": "2026-10-23T02:43:46.331Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "Quiz and Survey Master (QSM)に脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:35.929Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "6c33037dd675e6f8d12d459c1bb5d5ae10999afc54ff524a32ad7d9a59fe8846", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Quiz and Survey Master (QSM) の WordPress プラグインはバージョン 11.2.4 未満で、REST ルートがクイズのメール通知および結果ページ設定を返す際に、オブジェクトごとの所有権チェックを行わない。そのため、貢献者レベル以上の権限を持つユーザーは、他のユーザーが作成したクイズの設定（通知先メールアドレスなど）を読むことができる。", "risk": "攻撃者は他のユーザーが作成したクイズのメール通知先アドレスなどの設定情報を取得できる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象は Quiz and Survey Master (QSM) の WordPress プラグインで、バージョンが 11.2.4 未満であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "影響を受ける機能は、クイズのメール通知設定および結果ページ設定を返す REST ルートである。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "このチェックが欠如しているため、オブジェクトごとの所有権確認が行われない。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "貢献者レベル以上（contributor+）の権限を持つユーザーが対象となる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "対象ユーザーは他のユーザーが作成したクイズの設定情報を読み取ることができる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Quiz and Survey Master (QSM)。影響ありとして記載：11.2.4未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Quiz and Survey Master (QSM)」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-14826", "https://wpscan.com/vulnerability/bb9cac20-4df5-4834-89f0-746a5eab20ea/", "https://nvd.nist.gov/vuln/detail/CVE-2026-14826" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-14826", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/bb9cac20-4df5-4834-89f0-746a5eab20ea/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14826", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check on the REST routes that return a quiz's email-notification and results-page configuration, allowing users with contributor-level access and above to read the configuration, including notification recipient addresses, of quizzes created by other users.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json", "sourceField": "/containers/cna/title", "excerpt": "Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14826.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"Quiz and Survey Master (QSM)\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"11.2.4\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-14826（Quiz and Survey Master (QSM)）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は Quiz and Survey Master (QSM) の WordPress プラグインで、バージョンが 11.2.4 未満であること。\n・影響を受ける機能は、クイズのメール通知設定および結果ページ設定を返す REST ルートである。\n・このチェックが欠如しているため、オブジェクトごとの所有権確認が行われない。\n・貢献者レベル以上（contributor+）の権限を持つユーザーが対象となる。\n・対象ユーザーは他のユーザーが作成したクイズの設定情報を読み取ることができる。\n・公式の対象表：Quiz and Survey Master (QSM)。影響ありとして記載：11.2.4未満の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-14826", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:35.929Z", "lastSuccess": "2026-10-23T03:22:35.929Z", "sourceCheckedAt": "2026-10-23T02:43:46.331Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-14825", "aliases": [], "title": "Quiz and Survey Master (QSM)：脆弱性情報", "summary": "Quiz and Survey Master プラグインのバージョン 11.2.4 未満では、貢献者レベル以上のユーザーが、他のユーザーが作成したクイズのフロントエンドテキスト設定を所有権チェックなしに変更できる。", "risk": "攻撃者は他のユーザーが作成したクイズの表示テキストを任意に書き換えることができる。", "product": "Quiz and Survey Master (QSM)", "category": "wordpress", "component": "plugin", "severity": "low", "cvss": 2.7, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N", "affected": [ { "product": "Quiz and Survey Master (QSM)", "range": "< 11.2.4" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14825.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-14825", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/fb66cb33-e16f-47ee-88d6-5cf141e92a4b/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14825", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:15.804Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:46.312Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check before saving a quiz's front-end text settings, allowing users with contributor-level access and above to modify the text settings of quizzes created by other users.", "sourceTitle": "Quiz And Survey Master < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOR", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Quiz and Survey Master (QSM)", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThan": "11.2.4" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-14825", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14825.json", "fetchedAt": "2026-10-23T02:43:46.312Z", "publishedAt": "2026-08-19T06:00:15.804Z", "modifiedAt": "2026-08-19T13:14:24.772Z", "state": "published", "provider": "WPScan", "title": "Quiz And Survey Master < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOR", "descriptions": [ { "lang": "en", "value": "The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check before saving a quiz's front-end text settings, allowing users with contributor-level access and above to modify the text settings of quizzes created by other users.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "Quiz and Survey Master (QSM)", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "11.2.4", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-639 Authorization Bypass Through User-Controlled Key", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N", "baseScore": 2.7, "baseSeverity": "LOW", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/fb66cb33-e16f-47ee-88d6-5cf141e92a4b/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14825.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"Quiz and Survey Master (QSM)\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"11.2.4\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14825.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check before saving a quiz's front-end text settings, allowing users with contributor-level access and above to modify the text settings of quizzes created by other users.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14825.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-639 Authorization Bypass Through User-Controlled Key\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14825.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":2.7,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"LOW\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N\",\"integrityImpact\":\"LOW\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"HIGH\",\"confidentialityImpact\":\"NONE\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T13:14:24.772Z", "fetchedAt": "2026-10-23T02:43:46.312Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "Quiz and Survey Master (QSM)に脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:36.096Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "342e99d9a7de16e73ce27697ac1904afe5486c7d006cfd82c03c8abd6c827f29", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Quiz and Survey Master プラグインのバージョン 11.2.4 未満では、貢献者レベル以上のユーザーが、他のユーザーが作成したクイズのフロントエンドテキスト設定を所有権チェックなしに変更できる。", "risk": "攻撃者は他のユーザーが作成したクイズの表示テキストを任意に書き換えることができる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "対象は WordPress 用プラグイン「Quiz and Survey Master」。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14825.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "バージョンが 11.2.4 未満のものが影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14825.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "権限が contributor 以上のユーザーがこの操作を行える。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14825.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "公式の対象表：Quiz and Survey Master (QSM)。影響ありとして記載：11.2.4未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14825.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14825.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Quiz and Survey Master (QSM)」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14825.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-14825", "https://wpscan.com/vulnerability/fb66cb33-e16f-47ee-88d6-5cf141e92a4b/", "https://nvd.nist.gov/vuln/detail/CVE-2026-14825" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14825.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14825.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-14825", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/fb66cb33-e16f-47ee-88d6-5cf141e92a4b/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14825", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14825.json", "sourceField": "/containers/cna/title", "excerpt": "Quiz And Survey Master < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOR", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14825.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check before saving a quiz's front-end text settings, allowing users with contributor-level access and above to modify the text settings of quizzes created by other users.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14825.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"Quiz and Survey Master (QSM)\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"11.2.4\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-14825（Quiz and Survey Master (QSM)）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は WordPress 用プラグイン「Quiz and Survey Master」。\n・バージョンが 11.2.4 未満のものが影響を受ける。\n・権限が contributor 以上のユーザーがこの操作を行える。\n・公式の対象表：Quiz and Survey Master (QSM)。影響ありとして記載：11.2.4未満の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-14825", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:36.096Z", "lastSuccess": "2026-10-23T03:22:36.096Z", "sourceCheckedAt": "2026-10-23T02:43:46.312Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-14334", "aliases": [], "title": "Booking calendar, Appointment Booking System：ブラウザー上での不正な処理", "summary": "Booking calendar, Appointment Booking System プラグイン（バージョン 3.2.36 まで）は、アップロードされた SVG ファイルのサニタイズが不十分で、スクリプト除去を回避した SVG を攻撃者がアップロードでき、SVG が開かれたときに任意の JavaScript が実行されます。特に、予約内容を確認する管理者のセッションでスクリプトが実行される可能性があります。", "risk": "管理者が提出された予約の SVG を開くと、任意の JavaScript が実行され、管理者のセッションが乗っ取られる可能性があります。", "product": "Booking calendar, Appointment Booking System", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 8.8, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "affected": [ { "product": "Booking calendar, Appointment Booking System", "range": ">= 3.2.18 / <= 3.2.36" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14334.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-14334", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/9ddd1628-0b06-461b-8a5f-ba977f83fa7f/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14334", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:15.621Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:46.197Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Booking calendar, Appointment Booking System WordPress plugin through 3.2.36 does not properly sanitize uploaded SVG files, allowing unauthenticated attackers to upload a file that bypasses the Booking calendar, Appointment Booking System WordPress plugin through 3.2.36's script-stripping and executes arbitrary JavaScript when the SVG is opened, including in the session of an administrator who reviews the submitted booking.", "sourceTitle": "Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored XSS via SVG File Upload", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Booking calendar, Appointment Booking System", "versions": [ { "status": "affected", "versionType": "semver", "version": "3.2.18", "lessThanOrEqual": "3.2.36" } ], "defaultStatus": "unknown" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-14334", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14334.json", "fetchedAt": "2026-10-23T02:43:46.197Z", "publishedAt": "2026-08-19T06:00:15.621Z", "modifiedAt": "2026-08-19T16:16:50.277Z", "state": "published", "provider": "WPScan", "title": "Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored XSS via SVG File Upload", "descriptions": [ { "lang": "en", "value": "The Booking calendar, Appointment Booking System WordPress plugin through 3.2.36 does not properly sanitize uploaded SVG files, allowing unauthenticated attackers to upload a file that bypasses the Booking calendar, Appointment Booking System WordPress plugin through 3.2.36's script-stripping and executes arbitrary JavaScript when the SVG is opened, including in the session of an administrator who reviews the submitted booking.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "Booking calendar, Appointment Booking System", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "3.2.18", "lessThanOrEqual": "3.2.36", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-79 Cross-Site Scripting (XSS)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/9ddd1628-0b06-461b-8a5f-ba977f83fa7f/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14334.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"Booking calendar, Appointment Booking System\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"3.2.18\",\"lessThanOrEqual\":\"3.2.36\"}],\"defaultStatus\":\"unknown\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14334.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Booking calendar, Appointment Booking System WordPress plugin through 3.2.36 does not properly sanitize uploaded SVG files, allowing unauthenticated attackers to upload a file that bypasses the Booking calendar, Appointment Booking System WordPress plugin through 3.2.36's script-stripping and executes arbitrary JavaScript when the SVG is opened, including in the session of an administrator who reviews the submitted booking.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14334.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-79 Cross-Site Scripting (XSS)\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14334.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T16:16:50.277Z", "fetchedAt": "2026-10-23T02:43:46.197Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "Booking calendar, Appointment Booking Systemにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:37.149Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "136444ca38c40d49c18db8c1c08b893bbe2e13a91791647ba29c390c8f81badd", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Booking calendar, Appointment Booking System プラグイン（バージョン 3.2.36 まで）は、アップロードされた SVG ファイルのサニタイズが不十分で、スクリプト除去を回避した SVG を攻撃者がアップロードでき、SVG が開かれたときに任意の JavaScript が実行されます。特に、予約内容を確認する管理者のセッションでスクリプトが実行される可能性があります。", "risk": "管理者が提出された予約の SVG を開くと、任意の JavaScript が実行され、管理者のセッションが乗っ取られる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "認証されていない攻撃者が SVG ファイルをアップロードできる", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14334.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "管理者が提出された予約の SVG を開くと、任意の JavaScript が実行される", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14334.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Booking calendar, Appointment Booking System。影響ありとして記載：3.2.18以上、3.2.36以下。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14334.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14334.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Booking calendar, Appointment Booking System」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14334.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-14334", "https://wpscan.com/vulnerability/9ddd1628-0b06-461b-8a5f-ba977f83fa7f/", "https://nvd.nist.gov/vuln/detail/CVE-2026-14334" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14334.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14334.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-14334", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/9ddd1628-0b06-461b-8a5f-ba977f83fa7f/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14334", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14334.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Booking calendar, Appointment Booking System WordPress plugin through 3.2.36 does not properly sanitize uploaded SVG files, allowing unauthenticated attackers to upload a file that bypasses the Booking calendar, Appointment Booking System WordPress plugin through 3.2.36's script-stripping and executes arbitrary JavaScript when the SVG is opened, including in the session of an administrator who reviews the submitted booking.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14334.json", "sourceField": "/containers/cna/title", "excerpt": "Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored XSS via SVG File Upload", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14334.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"Booking calendar, Appointment Booking System\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"3.2.18\",\"lessThanOrEqual\":\"3.2.36\"}],\"defaultStatus\":\"unknown\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-14334（Booking calendar, Appointment Booking System）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・認証されていない攻撃者が SVG ファイルをアップロードできる\n・管理者が提出された予約の SVG を開くと、任意の JavaScript が実行される\n・公式の対象表：Booking calendar, Appointment Booking System。影響ありとして記載：3.2.18以上、3.2.36以下。個別に記されていない版の影響は、原資料でも未確定です。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-14334", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:37.149Z", "lastSuccess": "2026-10-23T03:22:37.149Z", "sourceCheckedAt": "2026-10-23T02:43:46.197Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-14287", "aliases": [], "title": "10Web Booster：ブラウザー上での不正な処理", "summary": "10Web Booster WordPress プラグインのバージョン 2.33.5 未満では、認証されていないリクエストハンドラでアクセストークンの検証が正しく行われず、攻撃者が提供したスタイルシートの内容がページの head 部分に出力される際にエスケープされません。その結果、認証されていない攻撃者がマークアップを保存でき、対象ページを閲覧した匿名の訪問者のブラウザーで JavaScript が実行されます。", "risk": "この脆弱性により、攻撃者が保存したスクリプトが匿名訪問者のブラウザーで実行され、ページ上で任意の JavaScript が動作します。", "product": "10Web Booster", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 4.7, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "affected": [ { "product": "10Web Booster", "range": "< 2.33.5" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-14287", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/a0519e86-b77e-4354-a91d-ff729514d570/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14287", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:15.446Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:46.140Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape attacker-supplied stylesheet content before rendering it into the page head, allowing an unauthenticated attacker to store markup that executes as JavaScript in the browser of anonymous visitors to an affected page.", "sourceTitle": "TenWeb Speed Optimizer < 2.33.5 - Unauthenticated Stored XSS via Critical CSS Token Bypass", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "10Web Booster", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThan": "2.33.5" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-14287", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json", "fetchedAt": "2026-10-23T02:43:46.140Z", "publishedAt": "2026-08-19T06:00:15.446Z", "modifiedAt": "2026-08-19T12:59:30.384Z", "state": "published", "provider": "WPScan", "title": "TenWeb Speed Optimizer < 2.33.5 - Unauthenticated Stored XSS via Critical CSS Token Bypass", "descriptions": [ { "lang": "en", "value": "The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape attacker-supplied stylesheet content before rendering it into the page head, allowing an unauthenticated attacker to store markup that executes as JavaScript in the browser of anonymous visitors to an affected page.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "10Web Booster", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "2.33.5", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-79 Cross-Site Scripting (XSS)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 4.7, "baseSeverity": "MEDIUM", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/a0519e86-b77e-4354-a91d-ff729514d570/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"10Web Booster\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"2.33.5\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape attacker-supplied stylesheet content before rendering it into the page head, allowing an unauthenticated attacker to store markup that executes as JavaScript in the browser of anonymous visitors to an affected page.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-79 Cross-Site Scripting (XSS)\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":4.7,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N\",\"integrityImpact\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"HIGH\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"LOW\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T12:59:30.384Z", "fetchedAt": "2026-10-23T02:43:46.140Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "10Web Boosterにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:37.328Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "eaadac6603b9bb29e80c892cc3f254c6895e72bd2d35049adf4249ee72fab073", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "10Web Booster WordPress プラグインのバージョン 2.33.5 未満では、認証されていないリクエストハンドラでアクセストークンの検証が正しく行われず、攻撃者が提供したスタイルシートの内容がページの head 部分に出力される際にエスケープされません。その結果、認証されていない攻撃者がマークアップを保存でき、対象ページを閲覧した匿名の訪問者のブラウザーで JavaScript が実行されます。", "risk": "この脆弱性により、攻撃者が保存したスクリプトが匿名訪問者のブラウザーで実行され、ページ上で任意の JavaScript が動作します。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象製品は 10Web Booster（WordPress プラグイン）です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "バージョンが 2.33.5 未満のすべてのリリースが影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "攻撃は認証されていないリクエストハンドラを通じて行われます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "リクエストハンドラはアクセストークンを正しく検証しません。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃者が提供したスタイルシートの内容がエスケープされずにページ head に埋め込まれます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "保存されたマークアップは、匿名の訪問者がページを閲覧した際に JavaScript として実行されます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：10Web Booster。影響ありとして記載：2.33.5未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「10Web Booster」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-14287", "https://wpscan.com/vulnerability/a0519e86-b77e-4354-a91d-ff729514d570/", "https://nvd.nist.gov/vuln/detail/CVE-2026-14287" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。", "公式タイトルにある名称は「TenWeb Speed Optimizer」、対象データの製品名は「10Web Booster」です。同じ製品の別名かどうかは、この表記だけで決めず、開発元・製品識別子も添えて照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-14287", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/a0519e86-b77e-4354-a91d-ff729514d570/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14287", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape attacker-supplied stylesheet content before rendering it into the page head, allowing an unauthenticated attacker to store markup that executes as JavaScript in the browser of anonymous visitors to an affected page.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json", "sourceField": "/containers/cna/title", "excerpt": "TenWeb Speed Optimizer < 2.33.5 - Unauthenticated Stored XSS via Critical CSS Token Bypass", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14287.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"10Web Booster\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"2.33.5\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-14287（10Web Booster）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象製品は 10Web Booster（WordPress プラグイン）です。\n・バージョンが 2.33.5 未満のすべてのリリースが影響を受けます。\n・攻撃は認証されていないリクエストハンドラを通じて行われます。\n・リクエストハンドラはアクセストークンを正しく検証しません。\n・攻撃者が提供したスタイルシートの内容がエスケープされずにページ head に埋め込まれます。\n・保存されたマークアップは、匿名の訪問者がページを閲覧した際に JavaScript として実行されます。\n・公式の対象表：10Web Booster。影響ありとして記載：2.33.5未満の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-14287", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:37.328Z", "lastSuccess": "2026-10-23T03:22:37.328Z", "sourceCheckedAt": "2026-10-23T02:43:46.140Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-14196", "aliases": [], "title": "WCFM Marketplace：脆弱性情報", "summary": "WCFM Marketplaceプラグインのバージョン3.8.1未満では、ベンダーが自分のレビューかどうかを確認せずに、レビューの承認取り消しや削除ができるため、他のベンダーのストアに属するレビューを変更または永久に削除できる。", "risk": "他ベンダーのストアにあるレビューが改ざんされたり、完全に削除されたりする可能性がある。", "product": "WCFM Marketplace", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 4.3, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "affected": [ { "product": "WCFM Marketplace", "range": "< 3.8.1" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14196.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-14196", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/877936f4-5664-4e17-b3cd-28f8f33f18ac/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14196", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:15.253Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:46.138Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The WCFM Marketplace WordPress plugin before 3.8.1 does not verify that a marketplace vendor owns a review before allowing it to be unapproved or deleted, allowing any vendor to modify or permanently delete reviews belonging to other vendors' stores.", "sourceTitle": "WCFM Marketplace < 3.8.1 - Store Vendor+ Cross-Vendor Review Deletion and Status Update via IDOR", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "WCFM Marketplace", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThan": "3.8.1" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-14196", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14196.json", "fetchedAt": "2026-10-23T02:43:46.138Z", "publishedAt": "2026-08-19T06:00:15.253Z", "modifiedAt": "2026-08-19T12:58:15.379Z", "state": "published", "provider": "WPScan", "title": "WCFM Marketplace < 3.8.1 - Store Vendor+ Cross-Vendor Review Deletion and Status Update via IDOR", "descriptions": [ { "lang": "en", "value": "The WCFM Marketplace WordPress plugin before 3.8.1 does not verify that a marketplace vendor owns a review before allowing it to be unapproved or deleted, allowing any vendor to modify or permanently delete reviews belonging to other vendors' stores.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "WCFM Marketplace", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "3.8.1", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-639 Authorization Bypass Through User-Controlled Key", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/877936f4-5664-4e17-b3cd-28f8f33f18ac/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14196.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"WCFM Marketplace\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"3.8.1\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14196.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The WCFM Marketplace WordPress plugin before 3.8.1 does not verify that a marketplace vendor owns a review before allowing it to be unapproved or deleted, allowing any vendor to modify or permanently delete reviews belonging to other vendors' stores.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14196.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-639 Authorization Bypass Through User-Controlled Key\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14196.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":4.3,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N\",\"integrityImpact\":\"LOW\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"NONE\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T12:58:15.379Z", "fetchedAt": "2026-10-23T02:43:46.138Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "WCFM Marketplaceに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:37.631Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "0a38d725e4290422489ea08ee78c53764bc02d67ac548da7a7b6c2a32e256a2a", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "WCFM Marketplaceプラグインのバージョン3.8.1未満では、ベンダーが自分のレビューかどうかを確認せずに、レビューの承認取り消しや削除ができるため、他のベンダーのストアに属するレビューを変更または永久に削除できる。", "risk": "他ベンダーのストアにあるレビューが改ざんされたり、完全に削除されたりする可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "WCFM Marketplaceプラグインを使用しているWordPressサイトで、ベンダーがレビューの承認取り消しまたは削除を行える権限を持つ場合に影響する。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14196.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "対象バージョンは3.8.1未満（semverで表記）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14196.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "公式の対象表：WCFM Marketplace。影響ありとして記載：3.8.1未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14196.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14196.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「WCFM Marketplace」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14196.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-14196", "https://wpscan.com/vulnerability/877936f4-5664-4e17-b3cd-28f8f33f18ac/", "https://nvd.nist.gov/vuln/detail/CVE-2026-14196" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14196.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14196.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-14196", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/877936f4-5664-4e17-b3cd-28f8f33f18ac/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14196", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14196.json", "sourceField": "/containers/cna/title", "excerpt": "WCFM Marketplace < 3.8.1 - Store Vendor+ Cross-Vendor Review Deletion and Status Update via IDOR", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14196.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The WCFM Marketplace WordPress plugin before 3.8.1 does not verify that a marketplace vendor owns a review before allowing it to be unapproved or deleted, allowing any vendor to modify or permanently delete reviews belonging to other vendors' stores.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14196.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"WCFM Marketplace\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"3.8.1\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-14196（WCFM Marketplace）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・WCFM Marketplaceプラグインを使用しているWordPressサイトで、ベンダーがレビューの承認取り消しまたは削除を行える権限を持つ場合に影響する。\n・対象バージョンは3.8.1未満（semverで表記）。\n・公式の対象表：WCFM Marketplace。影響ありとして記載：3.8.1未満の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-14196", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:37.631Z", "lastSuccess": "2026-10-23T03:22:37.631Z", "sourceCheckedAt": "2026-10-23T02:43:46.138Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-13175", "aliases": [], "title": "Eventin：脆弱性情報", "summary": "Eventin プラグインのバージョン 4.1.21 未満では、所有権の確認を行わずにスケジュールレコードの変更や削除を許可しているため、貢献者レベル以上のユーザーが他のユーザーが作成したスケジュールエントリを変更または削除できる。", "risk": "他のユーザーが作成したスケジュールエントリが不正に変更または削除される可能性がある。", "product": "Eventin", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "affected": [ { "product": "Eventin", "range": "< 4.1.21" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13175.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-13175", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/10762bf3-9663-40dc-9794-88ec7aa5b048/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13175", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:14.840Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:46.111Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Eventin WordPress plugin before 4.1.21 does not verify ownership before allowing schedule records to be modified or deleted, allowing users with contributor-level access and above to alter or delete schedule entries created by other users.", "sourceTitle": "Eventin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOR", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Eventin", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThan": "4.1.21" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-13175", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13175.json", "fetchedAt": "2026-10-23T02:43:46.111Z", "publishedAt": "2026-08-19T06:00:14.840Z", "modifiedAt": "2026-08-19T12:57:42.488Z", "state": "published", "provider": "WPScan", "title": "Eventin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOR", "descriptions": [ { "lang": "en", "value": "The Eventin WordPress plugin before 4.1.21 does not verify ownership before allowing schedule records to be modified or deleted, allowing users with contributor-level access and above to alter or delete schedule entries created by other users.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "Eventin", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "4.1.21", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-639 Authorization Bypass Through User-Controlled Key", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/10762bf3-9663-40dc-9794-88ec7aa5b048/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13175.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"Eventin\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"4.1.21\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13175.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Eventin WordPress plugin before 4.1.21 does not verify ownership before allowing schedule records to be modified or deleted, allowing users with contributor-level access and above to alter or delete schedule entries created by other users.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13175.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-639 Authorization Bypass Through User-Controlled Key\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13175.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":6.5,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"confidentialityImpact\":\"NONE\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T12:57:42.488Z", "fetchedAt": "2026-10-23T02:43:46.111Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "Eventinに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:37.918Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "3e6789e593e05f3cd852ef990099e2de8d12601d6e9918f82378c9ce9b6c50b2", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Eventin プラグインのバージョン 4.1.21 未満では、所有権の確認を行わずにスケジュールレコードの変更や削除を許可しているため、貢献者レベル以上のユーザーが他のユーザーが作成したスケジュールエントリを変更または削除できる。", "risk": "他のユーザーが作成したスケジュールエントリが不正に変更または削除される可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "WordPress 用 Eventin プラグインのバージョンが 4.1.21 未満であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13175.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "貢献者（contributor）レベル以上のアクセス権を持つユーザーが対象になること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13175.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Eventin。影響ありとして記載：4.1.21未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13175.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13175.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Eventin」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13175.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-13175", "https://wpscan.com/vulnerability/10762bf3-9663-40dc-9794-88ec7aa5b048/", "https://nvd.nist.gov/vuln/detail/CVE-2026-13175" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13175.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13175.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-13175", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/10762bf3-9663-40dc-9794-88ec7aa5b048/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13175", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13175.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Eventin WordPress plugin before 4.1.21 does not verify ownership before allowing schedule records to be modified or deleted, allowing users with contributor-level access and above to alter or delete schedule entries created by other users.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13175.json", "sourceField": "/containers/cna/title", "excerpt": "Eventin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOR", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13175.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"Eventin\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"4.1.21\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-13175（Eventin）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・WordPress 用 Eventin プラグインのバージョンが 4.1.21 未満であること。\n・貢献者（contributor）レベル以上のアクセス権を持つユーザーが対象になること。\n・公式の対象表：Eventin。影響ありとして記載：4.1.21未満の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-13175", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:37.918Z", "lastSuccess": "2026-10-23T03:22:37.918Z", "sourceCheckedAt": "2026-10-23T02:43:46.111Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-13174", "aliases": [], "title": "Eventin：脆弱性情報", "summary": "Eventin WordPress プラグインのバージョンが 4.1.21 未満の場合、所有者や権限の確認を行わずにユーザーアカウントを削除できるため、貢献者レベル以上の権限を持つユーザーは他のユーザーのアカウントを永久に削除できる。", "risk": "他のユーザーのアカウントが永久に削除され、復元できなくなる可能性がある。", "product": "Eventin", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Eventin", "range": "< 4.1.21" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13174.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-13174", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/849478d1-640f-49e0-8fa5-918e41654923/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13174", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:14.636Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:46.065Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Eventin WordPress plugin before 4.1.21 does not verify ownership or capability before deleting user accounts, allowing users with contributor-level access and above to permanently delete other users' accounts.", "sourceTitle": "Eventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOR", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Eventin", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThan": "4.1.21" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-13174", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13174.json", "fetchedAt": "2026-10-23T02:43:46.065Z", "publishedAt": "2026-08-19T06:00:14.636Z", "modifiedAt": "2026-08-19T12:57:08.978Z", "state": "published", "provider": "WPScan", "title": "Eventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOR", "descriptions": [ { "lang": "en", "value": "The Eventin WordPress plugin before 4.1.21 does not verify ownership or capability before deleting user accounts, allowing users with contributor-level access and above to permanently delete other users' accounts.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "Eventin", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "4.1.21", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-284 Improper Access Control", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/849478d1-640f-49e0-8fa5-918e41654923/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13174.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"Eventin\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"4.1.21\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13174.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Eventin WordPress plugin before 4.1.21 does not verify ownership or capability before deleting user accounts, allowing users with contributor-level access and above to permanently delete other users' accounts.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13174.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-284 Improper Access Control\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13174.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.2,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T12:57:08.978Z", "fetchedAt": "2026-10-23T02:43:46.065Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "Eventinに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:38.099Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "d02ad71e2b8e9653f4b0222cbbf48c7902edc97ad5760df1ef119a7049739af5", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Eventin WordPress プラグインのバージョンが 4.1.21 未満の場合、所有者や権限の確認を行わずにユーザーアカウントを削除できるため、貢献者レベル以上の権限を持つユーザーは他のユーザーのアカウントを永久に削除できる。", "risk": "他のユーザーのアカウントが永久に削除され、復元できなくなる可能性がある。", "summaryEvidenceIds": [ "E1", "E2", "E3" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Eventin WordPress プラグインのバージョンが 4.1.21 未満で、貢献者レベル以上の権限を持つユーザーが対象。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13174.json" ], "evidenceIds": [ "E1", "E2", "E3" ] }, { "text": "公式の対象表：Eventin。影響ありとして記載：4.1.21未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13174.json" ], "evidenceIds": [ "E2" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13174.json" ], "evidenceIds": [ "E2" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Eventin」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13174.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-13174", "https://wpscan.com/vulnerability/849478d1-640f-49e0-8fa5-918e41654923/", "https://nvd.nist.gov/vuln/detail/CVE-2026-13174" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13174.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13174.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-13174", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/849478d1-640f-49e0-8fa5-918e41654923/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13174", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13174.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Eventin WordPress plugin before 4.1.21 does not verify ownership or capability before deleting user accounts, allowing users with contributor-level access and above to permanently delete other users' accounts.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13174.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"Eventin\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"4.1.21\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13174.json", "sourceField": "/containers/cna/title", "excerpt": "Eventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOR", "language": null } ], "supportRequest": "件名：CVE-2026-13174（Eventin）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Eventin WordPress プラグインのバージョンが 4.1.21 未満で、貢献者レベル以上の権限を持つユーザーが対象。\n・公式の対象表：Eventin。影響ありとして記載：4.1.21未満の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-13174", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:38.099Z", "lastSuccess": "2026-10-23T03:22:38.099Z", "sourceCheckedAt": "2026-10-23T02:43:46.065Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-13173", "aliases": [], "title": "Eventin：脆弱性情報", "summary": "Eventin WordPressプラグインのバージョンが4.1.21未満では、スピーカーを作成する際にロールを割り当てたりユーザーメタデータを更新したりする処理で、他のユーザーを編集する権限があるかを確認しません。その結果、contributor 以上の権限を持つユーザーは他のユーザーのロールやメタデータを変更できてしまいます。", "risk": "他のユーザーのロールやメタデータが不正に変更される可能性があります。", "product": "Eventin", "category": "wordpress", "component": "plugin", "severity": "low", "cvss": 2.7, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N", "affected": [ { "product": "Eventin", "range": "< 4.1.21" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13173.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-13173", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/f1bb2ee8-85b2-415e-ab41-97b9958e5e70/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13173", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:14.418Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:46.008Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission to edit other users before assigning roles and updating user metadata during speaker creation, allowing users with contributor-level access and above to modify other users' roles and metadata.", "sourceTitle": "Eventin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Eventin", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThan": "4.1.21" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-13173", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13173.json", "fetchedAt": "2026-10-23T02:43:46.008Z", "publishedAt": "2026-08-19T06:00:14.418Z", "modifiedAt": "2026-08-19T12:55:10.293Z", "state": "published", "provider": "WPScan", "title": "Eventin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation", "descriptions": [ { "lang": "en", "value": "The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission to edit other users before assigning roles and updating user metadata during speaker creation, allowing users with contributor-level access and above to modify other users' roles and metadata.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "Eventin", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "4.1.21", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-862 Missing Authorization", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N", "baseScore": 2.7, "baseSeverity": "LOW", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/f1bb2ee8-85b2-415e-ab41-97b9958e5e70/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13173.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"Eventin\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"4.1.21\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13173.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission to edit other users before assigning roles and updating user metadata during speaker creation, allowing users with contributor-level access and above to modify other users' roles and metadata.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13173.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-862 Missing Authorization\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13173.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":2.7,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"LOW\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N\",\"integrityImpact\":\"LOW\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"HIGH\",\"confidentialityImpact\":\"NONE\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T12:55:10.293Z", "fetchedAt": "2026-10-23T02:43:46.008Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "Eventinに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:38.553Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "6eecc17e8769740c8250d6fd1a1c6b9b96c41bc2d93d8030b304d85b4004fb93", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Eventin WordPressプラグインのバージョンが4.1.21未満では、スピーカーを作成する際にロールを割り当てたりユーザーメタデータを更新したりする処理で、他のユーザーを編集する権限があるかを確認しません。その結果、contributor 以上の権限を持つユーザーは他のユーザーのロールやメタデータを変更できてしまいます。", "risk": "他のユーザーのロールやメタデータが不正に変更される可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Eventin プラグインのバージョンが 4.1.21 未満であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13173.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "スピーカー作成機能を使用する際、現在のユーザーが contributor 以上の権限を持っていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13173.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Eventin。影響ありとして記載：4.1.21未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13173.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13173.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Eventin」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13173.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-13173", "https://wpscan.com/vulnerability/f1bb2ee8-85b2-415e-ab41-97b9958e5e70/", "https://nvd.nist.gov/vuln/detail/CVE-2026-13173" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13173.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13173.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-13173", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/f1bb2ee8-85b2-415e-ab41-97b9958e5e70/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13173", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13173.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission to edit other users before assigning roles and updating user metadata during speaker creation, allowing users with contributor-level access and above to modify other users' roles and metadata.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13173.json", "sourceField": "/containers/cna/title", "excerpt": "Eventin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13173.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"Eventin\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"4.1.21\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-13173（Eventin）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Eventin プラグインのバージョンが 4.1.21 未満であること。\n・スピーカー作成機能を使用する際、現在のユーザーが contributor 以上の権限を持っていること。\n・公式の対象表：Eventin。影響ありとして記載：4.1.21未満の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-13173", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:38.553Z", "lastSuccess": "2026-10-23T03:22:38.553Z", "sourceCheckedAt": "2026-10-23T02:43:46.008Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-13169", "aliases": [], "title": "Eventin：脆弱性情報", "summary": "Eventin プラグイン（バージョン 4.1.21 未満）では、イベントの所有者確認が正しく行われないため、contributor 以上の権限を持つユーザーが、他のユーザー（管理者を含む）が作成したイベントを変更、削除、または別の作者に所有権を移すことができます。", "risk": "他のユーザー（管理者を含む）が作成したイベントが、不正に変更、削除、所有者の乗っ取りが可能になる。", "product": "Eventin", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 8.1, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "affected": [ { "product": "Eventin", "range": "< 4.1.21" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13169.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-13169", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/cf2b1152-7190-467b-a860-1f7bd806575d/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13169", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:14.210Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:45.996Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be modified, deleted, or reassigned to a different author, allowing users with contributor-level access and above to alter, delete, or take over events created by other users including administrators.", "sourceTitle": "Eventin < 4.1.21 - Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOR", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Eventin", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThan": "4.1.21" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-13169", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13169.json", "fetchedAt": "2026-10-23T02:43:45.996Z", "publishedAt": "2026-08-19T06:00:14.210Z", "modifiedAt": "2026-08-19T12:54:29.588Z", "state": "published", "provider": "WPScan", "title": "Eventin < 4.1.21 - Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOR", "descriptions": [ { "lang": "en", "value": "The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be modified, deleted, or reassigned to a different author, allowing users with contributor-level access and above to alter, delete, or take over events created by other users including administrators.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "Eventin", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "4.1.21", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-639 Authorization Bypass Through User-Controlled Key", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "baseScore": 8.1, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/cf2b1152-7190-467b-a860-1f7bd806575d/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13169.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"Eventin\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"4.1.21\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13169.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be modified, deleted, or reassigned to a different author, allowing users with contributor-level access and above to alter, delete, or take over events created by other users including administrators.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13169.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-639 Authorization Bypass Through User-Controlled Key\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13169.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.1,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T12:54:29.588Z", "fetchedAt": "2026-10-23T02:43:45.996Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "Eventinに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:40.460Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "68396da157ff72997ec18eb2595237ac4e8639b60d368db786af7edcbf674af2", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Eventin プラグイン（バージョン 4.1.21 未満）では、イベントの所有者確認が正しく行われないため、contributor 以上の権限を持つユーザーが、他のユーザー（管理者を含む）が作成したイベントを変更、削除、または別の作者に所有権を移すことができます。", "risk": "他のユーザー（管理者を含む）が作成したイベントが、不正に変更、削除、所有者の乗っ取りが可能になる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "Eventin WordPress プラグインのバージョンが 4.1.21 未満であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13169.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "プラグインがイベントの所有者を正しく検証しないこと。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13169.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "攻撃者は contributor 以上の権限を持つユーザーである必要があること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13169.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "公式の対象表：Eventin。影響ありとして記載：4.1.21未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13169.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13169.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Eventin」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13169.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-13169", "https://wpscan.com/vulnerability/cf2b1152-7190-467b-a860-1f7bd806575d/", "https://nvd.nist.gov/vuln/detail/CVE-2026-13169" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13169.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13169.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-13169", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/cf2b1152-7190-467b-a860-1f7bd806575d/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13169", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13169.json", "sourceField": "/containers/cna/title", "excerpt": "Eventin < 4.1.21 - Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOR", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13169.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be modified, deleted, or reassigned to a different author, allowing users with contributor-level access and above to alter, delete, or take over events created by other users including administrators.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13169.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"Eventin\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"4.1.21\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-13169（Eventin）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Eventin WordPress プラグインのバージョンが 4.1.21 未満であること。\n・プラグインがイベントの所有者を正しく検証しないこと。\n・攻撃者は contributor 以上の権限を持つユーザーである必要があること。\n・公式の対象表：Eventin。影響ありとして記載：4.1.21未満の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-13169", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:40.460Z", "lastSuccess": "2026-10-23T03:22:40.460Z", "sourceCheckedAt": "2026-10-23T02:43:45.996Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-12983", "aliases": [], "title": "Dinatur：データベースへの不正操作", "summary": "Dinatur WordPressプラグイン（バージョン1.18まで）は、ユーザー入力をサニタイズやエスケープせずにSQLクエリに組み込むため、認証されていないユーザーがSQLインジェクション攻撃を実行できる。また、同じハンドラが認可チェックなしでデータベーステーブルを切り捨てる処理を行うため、認証されていない訪問者がプラグインのデータを削除できる。", "risk": "認証されていないユーザーがデータベースを不正に操作し、テーブルを切り捨ててプラグインのデータを消去できる可能性がある。", "product": "Dinatur", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 8.6, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "affected": [ { "product": "Dinatur", "range": "<= 1.18" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-12983", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/1369f95a-4ad3-4b0e-a87f-da88d200685e/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12983", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:14.031Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:45.945Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks. The same handler also performs a database table truncation without any authorization check, allowing any unauthenticated visitor to wipe the Dinatur WordPress plugin through 1.18's data.", "sourceTitle": "Dinatur <= 1.18 - Unauthenticated SQL Injection via Column Name Injection", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Dinatur", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThanOrEqual": "1.18" } ], "defaultStatus": "unknown" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-12983", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json", "fetchedAt": "2026-10-23T02:43:45.945Z", "publishedAt": "2026-08-19T06:00:14.031Z", "modifiedAt": "2026-08-19T12:53:29.021Z", "state": "published", "provider": "WPScan", "title": "Dinatur <= 1.18 - Unauthenticated SQL Injection via Column Name Injection", "descriptions": [ { "lang": "en", "value": "The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks. The same handler also performs a database table truncation without any authorization check, allowing any unauthenticated visitor to wipe the Dinatur WordPress plugin through 1.18's data.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "Dinatur", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "1.18", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-89 SQL Injection", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "baseScore": 8.6, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/1369f95a-4ad3-4b0e-a87f-da88d200685e/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"Dinatur\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThanOrEqual\":\"1.18\"}],\"defaultStatus\":\"unknown\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks. The same handler also performs a database table truncation without any authorization check, allowing any unauthenticated visitor to wipe the Dinatur WordPress plugin through 1.18's data.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-89 SQL Injection\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":8.6,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N\",\"integrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T12:53:29.021Z", "fetchedAt": "2026-10-23T02:43:45.945Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "Dinaturにデータベースへの不正操作に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "データベースに不正な命令を送られ、情報の閲覧や変更につながる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:41.042Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "793ede4dd13aa9d7a2dbbc093c677f5ba791ca07db95aea837f26870093a194a", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Dinatur WordPressプラグイン（バージョン1.18まで）は、ユーザー入力をサニタイズやエスケープせずにSQLクエリに組み込むため、認証されていないユーザーがSQLインジェクション攻撃を実行できる。また、同じハンドラが認可チェックなしでデータベーステーブルを切り捨てる処理を行うため、認証されていない訪問者がプラグインのデータを削除できる。", "risk": "認証されていないユーザーがデータベースを不正に操作し、テーブルを切り捨ててプラグインのデータを消去できる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "プラグインのバージョンが1.18以下であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "認証されていないユーザーがプラグインに入力できる状況であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "プラグインがユーザー入力をサニタイズせず、SQLクエリに直接使用するハンドラが存在すること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "同じハンドラが認可チェックなしでデータベーステーブルの切り捨てを実行すること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Dinatur。影響ありとして記載：1.18以下の版。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Dinatur」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-12983", "https://wpscan.com/vulnerability/1369f95a-4ad3-4b0e-a87f-da88d200685e/", "https://nvd.nist.gov/vuln/detail/CVE-2026-12983" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-12983", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/1369f95a-4ad3-4b0e-a87f-da88d200685e/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12983", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks. The same handler also performs a database table truncation without any authorization check, allowing any unauthenticated visitor to wipe the Dinatur WordPress plugin through 1.18's data.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json", "sourceField": "/containers/cna/title", "excerpt": "Dinatur <= 1.18 - Unauthenticated SQL Injection via Column Name Injection", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12983.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"Dinatur\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThanOrEqual\":\"1.18\"}],\"defaultStatus\":\"unknown\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-12983（Dinatur）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・プラグインのバージョンが1.18以下であること。\n・認証されていないユーザーがプラグインに入力できる状況であること。\n・プラグインがユーザー入力をサニタイズせず、SQLクエリに直接使用するハンドラが存在すること。\n・同じハンドラが認可チェックなしでデータベーステーブルの切り捨てを実行すること。\n・公式の対象表：Dinatur。影響ありとして記載：1.18以下の版。個別に記されていない版の影響は、原資料でも未確定です。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-12983", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:41.042Z", "lastSuccess": "2026-10-23T03:22:41.042Z", "sourceCheckedAt": "2026-10-23T02:43:45.945Z", "errorCode": null }, "glossary": [ { "term": "SQLインジェクション", "meaning": "入力した値がデータベースへの命令として扱われ、意図しない問い合わせや操作をされる問題です。読み取り・書き換えなど、可能なことは脆弱性ごとに異なります。", "sourceUrl": "https://cwe.mitre.org/data/definitions/89.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-11565", "aliases": [], "title": "Advanced File Manager：脆弱性情報", "summary": "Advanced File Manager プラグインはバージョン 5.4.13 未満において、いくつかのファイル管理 AJAX アクションで権限チェックを行わないため、管理者がファイルマネージャー権限を付与した任意のユーザー（最も低い権限の購読者でも可）がサーバー上の任意のファイルを読み取ることができ、機密設定ファイルを含む任意のファイルを閲覧でき、さらに PHP 以外の既存ファイルを書き換えることができる。この操作により管理者アカウントやサイト全体が危険にさらされる可能性がある。", "risk": "任意のファイルを読み取られ、PHP 以外のファイルを書き換えられることで、管理者アカウントが乗っ取られ、サイト全体が侵害される恐れがある。", "product": "Advanced File Manager", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 8.5, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "affected": [ { "product": "Advanced File Manager", "range": "< 5.4.13" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11565.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-11565", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/5e03858d-db0b-4b65-99cc-eb01ad4195e9/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11565", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T06:00:13.843Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:45.791Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Advanced File Manager WordPress plugin before 5.4.13 does not perform capability checks in several of its file management AJAX actions, allowing users with any role to which an administrator has granted file-manager access (as low as Subscriber) to read arbitrary files on the server — including sensitive configuration files — and to overwrite existing non-PHP files, which can be leveraged to compromise administrator accounts and the whole site.", "sourceTitle": "Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_ui", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Advanced File Manager", "versions": [ { "status": "affected", "versionType": "semver", "version": "0", "lessThan": "5.4.13" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-11565", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11565.json", "fetchedAt": "2026-10-23T02:43:45.791Z", "publishedAt": "2026-08-19T06:00:13.843Z", "modifiedAt": "2026-08-19T12:52:52.335Z", "state": "published", "provider": "WPScan", "title": "Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_ui", "descriptions": [ { "lang": "en", "value": "The Advanced File Manager WordPress plugin before 5.4.13 does not perform capability checks in several of its file management AJAX actions, allowing users with any role to which an administrator has granted file-manager access (as low as Subscriber) to read arbitrary files on the server — including sensitive configuration files — and to overwrite existing non-PHP files, which can be leveraged to compromise administrator accounts and the whole site.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Unknown", "product": "Advanced File Manager", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "5.4.13", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "CWE-862 Missing Authorization", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "baseScore": 8.5, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wpscan.com/vulnerability/5e03858d-db0b-4b65-99cc-eb01ad4195e9/", "label": "WPScan", "tags": [ "exploit", "vdb-entry", "technical-description" ], "provider": "WPScan", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11565.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Unknown\",\"product\":\"Advanced File Manager\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"5.4.13\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11565.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Advanced File Manager WordPress plugin before 5.4.13 does not perform capability checks in several of its file management AJAX actions, allowing users with any role to which an administrator has granted file-manager access (as low as Subscriber) to read arbitrary files on the server — including sensitive configuration files — and to overwrite existing non-PHP files, which can be leveraged to compromise administrator accounts and the whole site.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11565.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-862 Missing Authorization\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11565.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":8.5,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T12:52:52.335Z", "fetchedAt": "2026-10-23T02:43:45.791Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "Advanced File Managerに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:41.154Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "77d844146491a0c398081990d67d857b72b4fc0d7881aef2e87618e823a406df", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Advanced File Manager プラグインはバージョン 5.4.13 未満において、いくつかのファイル管理 AJAX アクションで権限チェックを行わないため、管理者がファイルマネージャー権限を付与した任意のユーザー（最も低い権限の購読者でも可）がサーバー上の任意のファイルを読み取ることができ、機密設定ファイルを含む任意のファイルを閲覧でき、さらに PHP 以外の既存ファイルを書き換えることができる。この操作により管理者アカウントやサイト全体が危険にさらされる可能性がある。", "risk": "任意のファイルを読み取られ、PHP 以外のファイルを書き換えられることで、管理者アカウントが乗っ取られ、サイト全体が侵害される恐れがある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "Advanced File Manager WordPress プラグインのバージョンが 5.4.13 未満である場合に影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11565.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "管理者がファイルマネージャー権限を付与した任意のユーザー（購読者レベルでも可）がこの脆弱性を利用できる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11565.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "公式の対象表：Advanced File Manager。影響ありとして記載：5.4.13未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11565.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11565.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Advanced File Manager」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11565.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-11565", "https://wpscan.com/vulnerability/5e03858d-db0b-4b65-99cc-eb01ad4195e9/", "https://nvd.nist.gov/vuln/detail/CVE-2026-11565" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11565.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11565.json", "label": "CVE：WPScan" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-11565", "label": "CVE公式レコード" }, { "url": "https://wpscan.com/vulnerability/5e03858d-db0b-4b65-99cc-eb01ad4195e9/", "label": "contact@wpscan.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11565", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11565.json", "sourceField": "/containers/cna/title", "excerpt": "Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_ui", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11565.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Advanced File Manager WordPress plugin before 5.4.13 does not perform capability checks in several of its file management AJAX actions, allowing users with any role to which an administrator has granted file-manager access (as low as Subscriber) to read arbitrary files on the server — including sensitive configuration files — and to overwrite existing non-PHP files, which can be leveraged to compromise administrator accounts and the whole site.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11565.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Unknown\",\"product\":\"Advanced File Manager\",\"versions\":[{\"status\":\"affected\",\"versionType\":\"semver\",\"version\":\"0\",\"lessThan\":\"5.4.13\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-11565（Advanced File Manager）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Advanced File Manager WordPress プラグインのバージョンが 5.4.13 未満である場合に影響を受ける。\n・管理者がファイルマネージャー権限を付与した任意のユーザー（購読者レベルでも可）がこの脆弱性を利用できる。\n・公式の対象表：Advanced File Manager。影響ありとして記載：5.4.13未満の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-11565", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:41.154Z", "lastSuccess": "2026-10-23T03:22:41.154Z", "sourceCheckedAt": "2026-10-23T02:43:45.791Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-19942", "aliases": [], "title": "Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback：コード実行", "summary": "Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback プラグイン（バージョン 5.1.1 以下）は、AVCF_Abilities_Media::register（replace-media-file execute_callback）関数におけるファイルパスの検証が不十分なため、認証済みで author 権限以上の攻撃者がサーバー上の任意のファイルを削除できる脆弱性があります。攻撃手順は、まず atarim/update-post-field 権限で攻撃者が所有する添付ファイルの _wp_attached_file メタをディレクトリトラバーサルパスに書き換え、次に atarim/replace-media-file を呼び出して get_attached_file() がそのパスを解決し、対象ファイルを unlink（削除）させるというものです。特に wp-config.php など重要なファイルが削除されると、サーバー上で攻撃者がコードを実行できる可能性があります。", "risk": "任意のファイルが削除され、wp-config.php など重要なファイルが削除されるとサーバー上で攻撃者がコードを実行できる可能性があります。", "product": "Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 8.1, "cvssVersion": "3.1", "cvssSource": "Wordfence", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "affected": [ { "product": "Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback", "range": "<= 5.1.1" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json", "label": "CVE：Wordfence" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-19942", "label": "CVE公式レコード" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c66a75a3-d420-4f2e-9f61-fe7dc2cb759e?source=cve", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/doit/abilities/class-avcf-abilities-media.php#L1212", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/doit/abilities/class-avcf-abilities-metadata.php#L1279", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/vendor/wordpress/mcp-adapter/includes/Servers/DefaultServerFactory.php#L73", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/vendor/wordpress/mcp-adapter/includes/Transport/HttpTransport.php#L99", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/vendor/wordpress/mcp-adapter/includes/Abilities/ExecuteAbilityAbility.php#L91", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/doit/class-avcf-mcp.php#L329", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&old=3653026%40atarim-visual-collaboration&new=3653026%40atarim-visual-collaboration", "label": "security@wordfence.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19942", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T04:27:08.789Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:47.128Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the AVCF_Abilities_Media::register (replace-media-file execute_callback) function in all versions up to, and including, 5.1.1. This makes it possible for authenticated attackers, with author-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This is exploitable by first using the atarim/update-post-field ability to overwrite the _wp_attached_file meta of an attacker-owned attachment with a directory-traversal path, then invoking atarim/replace-media-file to cause get_attached_file() to resolve and unlink the targeted file.", "sourceTitle": "Atarim <= 5.1.1 - Authenticated (Author+) Arbitrary File Deletion via '_wp_attached_file' Meta", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "wpfeedback", "product": "Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback", "versions": [ { "version": "0", "status": "affected", "lessThanOrEqual": "5.1.1", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-19942", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json", "fetchedAt": "2026-10-23T02:43:47.128Z", "publishedAt": "2026-08-19T04:27:08.789Z", "modifiedAt": "2026-08-20T15:36:47.587Z", "state": "published", "provider": "Wordfence", "title": "Atarim <= 5.1.1 - Authenticated (Author+) Arbitrary File Deletion via '_wp_attached_file' Meta", "descriptions": [ { "lang": "en", "value": "The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the AVCF_Abilities_Media::register (replace-media-file execute_callback) function in all versions up to, and including, 5.1.1. This makes it possible for authenticated attackers, with author-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This is exploitable by first using the atarim/update-post-field ability to overwrite the _wp_attached_file meta of an attacker-owned attachment with a directory-traversal path, then invoking atarim/replace-media-file to cause get_attached_file() to resolve and unlink the targeted file.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "wpfeedback", "product": "Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "5.1.1", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-22", "lang": "en", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "provider": "Wordfence", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c66a75a3-d420-4f2e-9f61-fe7dc2cb759e?source=cve", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/0" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/doit/abilities/class-avcf-abilities-media.php#L1212", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/1" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/doit/abilities/class-avcf-abilities-metadata.php#L1279", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/2" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/vendor/wordpress/mcp-adapter/includes/Servers/DefaultServerFactory.php#L73", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/3" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/vendor/wordpress/mcp-adapter/includes/Transport/HttpTransport.php#L99", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/4" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/vendor/wordpress/mcp-adapter/includes/Abilities/ExecuteAbilityAbility.php#L91", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/5" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/doit/class-avcf-mcp.php#L329", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/6" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&old=3653026%40atarim-visual-collaboration&new=3653026%40atarim-visual-collaboration", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/7" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"wpfeedback\",\"product\":\"Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThanOrEqual\":\"5.1.1\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the AVCF_Abilities_Media::register (replace-media-file execute_callback) function in all versions up to, and including, 5.1.1. This makes it possible for authenticated attackers, with author-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This is exploitable by first using the atarim/update-post-field ability to overwrite the _wp_attached_file meta of an attacker-owned attachment with a directory-traversal path, then invoking atarim/replace-media-file to cause get_attached_file() to resolve and unlink the targeted file.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\",\"cweId\":\"CWE-22\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-20T15:36:47.587Z", "fetchedAt": "2026-10-23T02:43:47.128Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedbackにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:41.310Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "837566ecc98ed508507c02db10ac8e07b51a38e6394790acb1e9f89d473173c5", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback プラグイン（バージョン 5.1.1 以下）は、AVCF_Abilities_Media::register（replace-media-file execute_callback）関数におけるファイルパスの検証が不十分なため、認証済みで author 権限以上の攻撃者がサーバー上の任意のファイルを削除できる脆弱性があります。攻撃手順は、まず atarim/update-post-field 権限で攻撃者が所有する添付ファイルの _wp_attached_file メタをディレクトリトラバーサルパスに書き換え、次に atarim/replace-media-file を呼び出して get_attached_file() がそのパスを解決し、対象ファイルを unlink（削除）させるというものです。特に wp-config.php など重要なファイルが削除されると、サーバー上で攻撃者がコードを実行できる可能性があります。", "risk": "任意のファイルが削除され、wp-config.php など重要なファイルが削除されるとサーバー上で攻撃者がコードを実行できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Atarim プラグインのバージョンが 5.1.1 以下であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "攻撃者が認証済みで、author 権限以上を持っていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃者が自分が所有する添付ファイルの _wp_attached_file メタをディレクトリトラバーサルパスに上書きできること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "atarim/update-post-field 権限を使用して上記上書きが可能であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "atarim/replace-media-file を呼び出すことで get_attached_file() が解決し、対象ファイルが unlink（削除）されること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：wpfeedback / Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback。影響ありとして記載：5.1.1以下の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-19942", "https://www.wordfence.com/threat-intel/vulnerabilities/id/c66a75a3-d420-4f2e-9f61-fe7dc2cb759e?source=cve", "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/doit/abilities/class-avcf-abilities-media.php#L1212", "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/doit/abilities/class-avcf-abilities-metadata.php#L1279", "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/vendor/wordpress/mcp-adapter/includes/Servers/DefaultServerFactory.php#L73", "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/vendor/wordpress/mcp-adapter/includes/Transport/HttpTransport.php#L99", "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/vendor/wordpress/mcp-adapter/includes/Abilities/ExecuteAbilityAbility.php#L91", "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/doit/class-avcf-mcp.php#L329", "https://plugins.trac.wordpress.org/changeset?reponame=&old=3653026%40atarim-visual-collaboration&new=3653026%40atarim-visual-collaboration", "https://nvd.nist.gov/vuln/detail/CVE-2026-19942" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json", "label": "CVE：Wordfence" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-19942", "label": "CVE公式レコード" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c66a75a3-d420-4f2e-9f61-fe7dc2cb759e?source=cve", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/doit/abilities/class-avcf-abilities-media.php#L1212", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/doit/abilities/class-avcf-abilities-metadata.php#L1279", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/vendor/wordpress/mcp-adapter/includes/Servers/DefaultServerFactory.php#L73", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/vendor/wordpress/mcp-adapter/includes/Transport/HttpTransport.php#L99", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/vendor/wordpress/mcp-adapter/includes/Abilities/ExecuteAbilityAbility.php#L91", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/atarim-visual-collaboration/tags/5.1.1/doit/class-avcf-mcp.php#L329", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&old=3653026%40atarim-visual-collaboration&new=3653026%40atarim-visual-collaboration", "label": "security@wordfence.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19942", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the AVCF_Abilities_Media::register (replace-media-file execute_callback) function in all versions up to, and including, 5.1.1. This makes it possible for authenticated attackers, with author-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This is exploitable by first using the atarim/update-post-field ability to overwrite the _wp_attached_file meta of an attacker-owned attachment with a directory-traversal path, then invoking atarim/replace-media-file to cause get_attached_file() to resolve and unlink the targeted file.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json", "sourceField": "/containers/cna/title", "excerpt": "Atarim <= 5.1.1 - Authenticated (Author+) Arbitrary File Deletion via '_wp_attached_file' Meta", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19942.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"wpfeedback\",\"product\":\"Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThanOrEqual\":\"5.1.1\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-19942（Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Atarim プラグインのバージョンが 5.1.1 以下であること。\n・攻撃者が認証済みで、author 権限以上を持っていること。\n・攻撃者が自分が所有する添付ファイルの _wp_attached_file メタをディレクトリトラバーサルパスに上書きできること。\n・atarim/update-post-field 権限を使用して上記上書きが可能であること。\n・atarim/replace-media-file を呼び出すことで get_attached_file() が解決し、対象ファイルが unlink（削除）されること。\n・公式の対象表：wpfeedback / Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback。影響ありとして記載：5.1.1以下の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-19942", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:41.310Z", "lastSuccess": "2026-10-23T03:22:41.310Z", "sourceCheckedAt": "2026-10-23T02:43:47.128Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-15421", "aliases": [], "title": "Speed Optimizer – The All-In-One Performance-Boosting Plugin：ブラウザー上での不正な処理", "summary": "Speed Optimizer – The All-In-One Performance-Boosting Plugin のバージョン 7.8.0 以下では、画像タグの属性に対する入力のサニタイズと出力エスケープが不十分なため、認証済みの攻撃者（貢献者レベル以上）が任意のウェブスクリプトをページに埋め込むことができ、埋め込まれたページにアクセスしたユーザーのブラウザーでそのスクリプトが実行されます。この脆弱性は、サイト管理者がプラグイン設定で「Lazy Load Media」オプションを有効にしている場合にのみ悪用可能です。", "risk": "攻撃者が埋め込んだスクリプトがユーザーのブラウザーで実行され、ページ上で不正な処理が行われる可能性があります。", "product": "Speed Optimizer – The All-In-One Performance-Boosting Plugin", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.4, "cvssVersion": "3.1", "cvssSource": "Wordfence", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "Speed Optimizer – The All-In-One Performance-Boosting Plugin", "range": "<= 7.8.0" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json", "label": "CVE：Wordfence" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-15421", "label": "CVE公式レコード" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2626ad96-4346-4564-b6bd-0c226bd8dfd4?source=cve", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.8.0/core/Lazy_Load/Lazy_Load_Images.php#L31", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.8.0/core/Lazy_Load/Abstract_Lazy_Load.php#L109", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.8.0/core/Lazy_Load/Lazy_Load.php#L39", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.7.11/core/Lazy_Load/Lazy_Load_Images.php#L31", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.7.11/core/Lazy_Load/Abstract_Lazy_Load.php#L109", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.7.11/core/Lazy_Load/Lazy_Load.php#L39", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&new=3642965%40sg-cachepress%2Ftags%2F7.8.1&old=3581843%40sg-cachepress%2Ftags%2F7.8.0", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?old_path=%2Fsg-cachepress/tags/7.8.0&new_path=%2Fsg-cachepress/tags/7.8.1", "label": "security@wordfence.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15421", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-19T01:26:11.381Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:46.524Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "The Speed Optimizer – The All-In-One Performance-Boosting Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Image Tag Attributes in all versions up to, and including, 7.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only exploitable when the site administrator has enabled the Lazy Load Media option in the plugin settings.", "sourceTitle": "Speed Optimizer <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "siteground", "product": "Speed Optimizer – The All-In-One Performance-Boosting Plugin", "versions": [ { "version": "0", "status": "affected", "lessThanOrEqual": "7.8.0", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-15421", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json", "fetchedAt": "2026-10-23T02:43:46.524Z", "publishedAt": "2026-08-19T01:26:11.381Z", "modifiedAt": "2026-08-20T15:36:47.771Z", "state": "published", "provider": "Wordfence", "title": "Speed Optimizer <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes", "descriptions": [ { "lang": "en", "value": "The Speed Optimizer – The All-In-One Performance-Boosting Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Image Tag Attributes in all versions up to, and including, 7.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only exploitable when the site administrator has enabled the Lazy Load Media option in the plugin settings.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "siteground", "product": "Speed Optimizer – The All-In-One Performance-Boosting Plugin", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "7.8.0", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-79", "lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "baseScore": 6.4, "baseSeverity": "MEDIUM", "provider": "Wordfence", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2626ad96-4346-4564-b6bd-0c226bd8dfd4?source=cve", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/0" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.8.0/core/Lazy_Load/Lazy_Load_Images.php#L31", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/1" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.8.0/core/Lazy_Load/Abstract_Lazy_Load.php#L109", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/2" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.8.0/core/Lazy_Load/Lazy_Load.php#L39", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/3" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.7.11/core/Lazy_Load/Lazy_Load_Images.php#L31", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/4" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.7.11/core/Lazy_Load/Abstract_Lazy_Load.php#L109", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/5" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.7.11/core/Lazy_Load/Lazy_Load.php#L39", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/6" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&new=3642965%40sg-cachepress%2Ftags%2F7.8.1&old=3581843%40sg-cachepress%2Ftags%2F7.8.0", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/7" }, { "url": "https://plugins.trac.wordpress.org/changeset?old_path=%2Fsg-cachepress/tags/7.8.0&new_path=%2Fsg-cachepress/tags/7.8.1", "label": "Wordfence", "tags": [], "provider": "Wordfence", "sourcePath": "/containers/cna/references/8" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"siteground\",\"product\":\"Speed Optimizer – The All-In-One Performance-Boosting Plugin\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThanOrEqual\":\"7.8.0\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Speed Optimizer – The All-In-One Performance-Boosting Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Image Tag Attributes in all versions up to, and including, 7.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only exploitable when the site administrator has enabled the Lazy Load Media option in the plugin settings.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\",\"cweId\":\"CWE-79\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N\",\"baseScore\":6.4,\"baseSeverity\":\"MEDIUM\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-20T15:36:47.771Z", "fetchedAt": "2026-10-23T02:43:46.524Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "Speed Optimizer – The All-In-One Performance-Boosting Pluginにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:42.752Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "66d897da026e9cc55c014bf2af60ddb53e566ec691fa7dc57be6d95e3857f9cd", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Speed Optimizer – The All-In-One Performance-Boosting Plugin のバージョン 7.8.0 以下では、画像タグの属性に対する入力のサニタイズと出力エスケープが不十分なため、認証済みの攻撃者（貢献者レベル以上）が任意のウェブスクリプトをページに埋め込むことができ、埋め込まれたページにアクセスしたユーザーのブラウザーでそのスクリプトが実行されます。この脆弱性は、サイト管理者がプラグイン設定で「Lazy Load Media」オプションを有効にしている場合にのみ悪用可能です。", "risk": "攻撃者が埋め込んだスクリプトがユーザーのブラウザーで実行され、ページ上で不正な処理が行われる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象プラグインは WordPress 用の「Speed Optimizer – The All-In-One Performance-Boosting Plugin」です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "影響を受けるバージョンは 7.8.0 以下のすべてのバージョンです。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "攻撃者は認証済みで、貢献者（Contributor）レベル以上の権限を持っている必要があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "サイト管理者がプラグイン設定で「Lazy Load Media」オプションを有効にしていることが前提です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：siteground / Speed Optimizer – The All-In-One Performance-Boosting Plugin。影響ありとして記載：7.8.0以下の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「Speed Optimizer – The All-In-One Performance-Boosting Plugin」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-15421", "https://www.wordfence.com/threat-intel/vulnerabilities/id/2626ad96-4346-4564-b6bd-0c226bd8dfd4?source=cve", "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.8.0/core/Lazy_Load/Lazy_Load_Images.php#L31", "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.8.0/core/Lazy_Load/Abstract_Lazy_Load.php#L109", "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.8.0/core/Lazy_Load/Lazy_Load.php#L39", "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.7.11/core/Lazy_Load/Lazy_Load_Images.php#L31", "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.7.11/core/Lazy_Load/Abstract_Lazy_Load.php#L109", "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.7.11/core/Lazy_Load/Lazy_Load.php#L39", "https://plugins.trac.wordpress.org/changeset?reponame=&new=3642965%40sg-cachepress%2Ftags%2F7.8.1&old=3581843%40sg-cachepress%2Ftags%2F7.8.0", "https://plugins.trac.wordpress.org/changeset?old_path=%2Fsg-cachepress/tags/7.8.0&new_path=%2Fsg-cachepress/tags/7.8.1", "https://nvd.nist.gov/vuln/detail/CVE-2026-15421" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json", "label": "CVE：Wordfence" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-15421", "label": "CVE公式レコード" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2626ad96-4346-4564-b6bd-0c226bd8dfd4?source=cve", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.8.0/core/Lazy_Load/Lazy_Load_Images.php#L31", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.8.0/core/Lazy_Load/Abstract_Lazy_Load.php#L109", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.8.0/core/Lazy_Load/Lazy_Load.php#L39", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.7.11/core/Lazy_Load/Lazy_Load_Images.php#L31", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.7.11/core/Lazy_Load/Abstract_Lazy_Load.php#L109", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/sg-cachepress/tags/7.7.11/core/Lazy_Load/Lazy_Load.php#L39", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&new=3642965%40sg-cachepress%2Ftags%2F7.8.1&old=3581843%40sg-cachepress%2Ftags%2F7.8.0", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?old_path=%2Fsg-cachepress/tags/7.8.0&new_path=%2Fsg-cachepress/tags/7.8.1", "label": "security@wordfence.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15421", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Speed Optimizer – The All-In-One Performance-Boosting Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Image Tag Attributes in all versions up to, and including, 7.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only exploitable when the site administrator has enabled the Lazy Load Media option in the plugin settings.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json", "sourceField": "/containers/cna/title", "excerpt": "Speed Optimizer <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15421.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"siteground\",\"product\":\"Speed Optimizer – The All-In-One Performance-Boosting Plugin\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThanOrEqual\":\"7.8.0\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-15421（Speed Optimizer – The All-In-One Performance-Boosting Plugin）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象プラグインは WordPress 用の「Speed Optimizer – The All-In-One Performance-Boosting Plugin」です。\n・影響を受けるバージョンは 7.8.0 以下のすべてのバージョンです。\n・攻撃者は認証済みで、貢献者（Contributor）レベル以上の権限を持っている必要があります。\n・サイト管理者がプラグイン設定で「Lazy Load Media」オプションを有効にしていることが前提です。\n・公式の対象表：siteground / Speed Optimizer – The All-In-One Performance-Boosting Plugin。影響ありとして記載：7.8.0以下の版。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-15421", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:42.752Z", "lastSuccess": "2026-10-23T03:22:42.752Z", "sourceCheckedAt": "2026-10-23T02:43:46.524Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-64849", "aliases": [], "title": "mlflow：脆弱性情報", "summary": "MLflow の未認証 POST /api/2.0/mlflow/webhooks/{id}/test エンドポイントは、元の URL のみ _validate_webhook_url() を呼び出し、リダイレクト先や DNS 再バインディングで解決されたホスト名を検証せずに追従するため、攻撃者は内部サービスやクラウドメタデータサービスへリクエストを送信し、レスポンスのステータスや本文を取得できる。", "risk": "攻撃者が内部ネットワークやクラウドメタデータサービスにリクエストを送れるため、機密情報が漏洩する可能性がある。", "product": "mlflow", "category": "other", "component": "package", "severity": "critical", "cvss": 9.3, "cvssVersion": "3.1", "cvssSource": "GitHub_M", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "affected": [ { "product": "mlflow", "range": ">= 3.3.0, < 3.15.0" } ], "fixed": [], "steps": [ "バージョン 3.15.0 以降にアップグレードすれば問題は修正される。", "「CVE-2026-64849」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-64849", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-64849", "label": "CVE公式レコード" }, { "url": "https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j", "label": "https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j" }, { "url": "https://github.com/mlflow/mlflow/issues/24179", "label": "CISAが示す関連情報" }, { "url": "https://github.com/mlflow/mlflow/pull/24258", "label": "CISAが示す関連情報" }, { "url": "https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939", "label": "https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939" }, { "url": "https://github.com/mlflow/mlflow/releases/tag/v3.15.0", "label": "https://github.com/mlflow/mlflow/releases/tag/v3.15.0" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64849", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-08-17T21:16:10.612Z", "modifiedAt": "2026-10-02T18:22:19.974Z", "fetchedAt": "2026-10-23T02:43:49.891Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow/utils/validation.py only for the original URL while mlflow/webhooks/delivery.py follows redirects and re-resolves the hostname without pinning the validated address, allowing attackers to reach internal or cloud metadata services and receive response_status and response_body. This issue is fixed in version 3.15.0.", "sourceTitle": "MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "mlflow", "product": "mlflow", "versions": [ { "version": ">= 3.3.0, < 3.15.0", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-64849", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json", "fetchedAt": "2026-10-23T02:43:49.891Z", "publishedAt": "2026-08-17T21:16:10.612Z", "modifiedAt": "2026-10-02T18:22:19.974Z", "state": "published", "provider": "GitHub_M", "title": "MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)", "descriptions": [ { "lang": "en", "value": "MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow/utils/validation.py only for the original URL while mlflow/webhooks/delivery.py follows redirects and re-resolves the hostname without pinning the validated address, allowing attackers to reach internal or cloud metadata services and receive response_status and response_body. This issue is fixed in version 3.15.0.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "mlflow", "product": "mlflow", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": ">= 3.3.0, < 3.15.0", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-918", "lang": "en", "description": "CWE-918: Server-Side Request Forgery (SSRF)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "baseScore": 9.3, "baseSeverity": "CRITICAL", "provider": "GitHub_M", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j", "label": "https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j", "tags": [ "x_refsource_CONFIRM" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/0" }, { "url": "https://github.com/mlflow/mlflow/issues/24179", "label": "https://github.com/mlflow/mlflow/issues/24179", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/1" }, { "url": "https://github.com/mlflow/mlflow/pull/24258", "label": "https://github.com/mlflow/mlflow/pull/24258", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/2" }, { "url": "https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939", "label": "https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/3" }, { "url": "https://github.com/mlflow/mlflow/releases/tag/v3.15.0", "label": "https://github.com/mlflow/mlflow/releases/tag/v3.15.0", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/4" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-64849", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"mlflow\",\"product\":\"mlflow\",\"versions\":[{\"version\":\">= 3.3.0, < 3.15.0\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow/utils/validation.py only for the original URL while mlflow/webhooks/delivery.py follows redirects and re-resolves the hostname without pinning the validated address, allowing attackers to reach internal or cloud metadata services and receive response_status and response_body. This issue is fixed in version 3.15.0.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-918\",\"lang\":\"en\",\"description\":\"CWE-918: Server-Side Request Forgery (SSRF)\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"NONE\",\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"LOW\",\"privilegesRequired\":\"NONE\",\"scope\":\"CHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-02T18:22:19.974Z", "fetchedAt": "2026-10-23T02:43:49.891Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-08-19T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "sourceSummary": "mlflowに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:43.288Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "8041460370c38348eab5748430a31cfab58cd0685d051de71ff604b5c8ed7b6d", "sourceModifiedAt": "2026-10-02T18:22:19.974Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "MLflow の未認証 POST /api/2.0/mlflow/webhooks/{id}/test エンドポイントは、元の URL のみ _validate_webhook_url() を呼び出し、リダイレクト先や DNS 再バインディングで解決されたホスト名を検証せずに追従するため、攻撃者は内部サービスやクラウドメタデータサービスへリクエストを送信し、レスポンスのステータスや本文を取得できる。", "risk": "攻撃者が内部ネットワークやクラウドメタデータサービスにリクエストを送れるため、機密情報が漏洩する可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "MLflow バージョン 3.3.0 以上 3.15.0 未満が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "認証なしで POST /api/2.0/mlflow/webhooks/{id}/test を呼び出すと脆弱性が発生する。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：mlflow / mlflow。影響ありとして記載：>= 3.3.0, < 3.15.0。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-64849" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json" ], "evidenceIds": [ "E3" ] }, { "text": "「mlflow」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-64849", "https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j", "https://github.com/mlflow/mlflow/issues/24179", "https://github.com/mlflow/mlflow/pull/24258", "https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939", "https://github.com/mlflow/mlflow/releases/tag/v3.15.0", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-64849", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-64849" ] } ], "actions": [ { "text": "バージョン 3.15.0 以降にアップグレードすれば問題は修正される。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json" ], "evidenceIds": [ "E1" ] }, { "text": "「CVE-2026-64849」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-64849", "https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j", "https://github.com/mlflow/mlflow/issues/24179", "https://github.com/mlflow/mlflow/pull/24258", "https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939", "https://github.com/mlflow/mlflow/releases/tag/v3.15.0", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-64849", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-64849" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-64849", "https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j", "https://github.com/mlflow/mlflow/issues/24179", "https://github.com/mlflow/mlflow/pull/24258", "https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939", "https://github.com/mlflow/mlflow/releases/tag/v3.15.0", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-64849", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-64849" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-64849", "https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j", "https://github.com/mlflow/mlflow/issues/24179", "https://github.com/mlflow/mlflow/pull/24258", "https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939", "https://github.com/mlflow/mlflow/releases/tag/v3.15.0", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-64849", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-64849" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-64849", "https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j", "https://github.com/mlflow/mlflow/issues/24179", "https://github.com/mlflow/mlflow/pull/24258", "https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939", "https://github.com/mlflow/mlflow/releases/tag/v3.15.0", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-64849", "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "https://nvd.nist.gov/vuln/detail/CVE-2026-64849" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-64849", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-64849", "label": "CVE公式レコード" }, { "url": "https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j", "label": "https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j" }, { "url": "https://github.com/mlflow/mlflow/issues/24179", "label": "CISAが示す関連情報" }, { "url": "https://github.com/mlflow/mlflow/pull/24258", "label": "CISAが示す関連情報" }, { "url": "https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939", "label": "https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939" }, { "url": "https://github.com/mlflow/mlflow/releases/tag/v3.15.0", "label": "https://github.com/mlflow/mlflow/releases/tag/v3.15.0" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64849", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow/utils/validation.py only for the original URL while mlflow/webhooks/delivery.py follows redirects and re-resolves the hostname without pinning the validated address, allowing attackers to reach internal or cloud metadata services and receive response_status and response_body. This issue is fixed in version 3.15.0.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json", "sourceField": "/containers/cna/title", "excerpt": "MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"mlflow\",\"product\":\"mlflow\",\"versions\":[{\"version\":\">= 3.3.0, < 3.15.0\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-64849", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-64849\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-64849（mlflow）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・MLflow バージョン 3.3.0 以上 3.15.0 未満が影響を受ける。\n・認証なしで POST /api/2.0/mlflow/webhooks/{id}/test を呼び出すと脆弱性が発生する。\n・公式の対象表：mlflow / mlflow。影響ありとして記載：>= 3.3.0, < 3.15.0。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-64849", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:43.288Z", "lastSuccess": "2026-10-23T03:22:43.288Z", "sourceCheckedAt": "2026-10-23T02:43:49.891Z", "errorCode": null }, "glossary": [ { "term": "POST", "meaning": "フォームなどのデータを、相手のサーバーへ送るための通信方法です。この言葉だけで、情報漏えいや設定変更が起きたと判断するものではありません。", "sourceUrl": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Methods/POST", "kind": "general_definition" } ] } }, { "id": "CVE-2026-66602", "aliases": [], "title": "HashBar – WordPress Notification Bar：意図しない操作", "summary": "WordPress 用プラグイン HashBar – WordPress Notification Bar のバージョン 2.0.0 以下に Cross Site Request Forgery (CSRF) の脆弱性が存在します。", "risk": "攻撃者が CSRF を実行できる可能性があります。", "product": "HashBar – WordPress Notification Bar", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 8.8, "cvssVersion": "3.1", "cvssSource": "Patchstack", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "affected": [ { "product": "HashBar – WordPress Notification Bar", "range": ">= n/a / <= 2.0.0 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 2.0.1から影響なし。版の順序・条件は原文確認）" } ], "fixed": [], "steps": [ "WordPress HashBar – WordPress Notification Bar プラグインを最新バージョン（少なくとも 2.0.1）に更新してください。", "「CVE-2026-66602」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "ファイルとデータベースのバックアップを取り、管理画面の「ダッシュボード」→「更新」で該当プラグインの更新を実行します。更新が表示されない有料製品などは、購入先・開発元の正規の配布経路を利用してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66602.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-66602", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/hashbar-wp-notification-bar/vulnerability/wordpress-hashbar-wordpress-notification-bar-plugin-2-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66602", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-18T22:03:24.596Z", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-23T02:43:49.951Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery.\n\nThis issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0.", "sourceTitle": "WordPress HashBar – WordPress Notification Bar plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "DevItems", "product": "HashBar – WordPress Notification Bar", "collectionURL": "https://wordpress.org/plugins", "packageName": "hashbar-wp-notification-bar", "versions": [ { "status": "affected", "version": "n/a", "lessThanOrEqual": "2.0.0", "changes": [ { "at": "2.0.1", "status": "unaffected" } ], "versionType": "custom" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-66602", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66602.json", "fetchedAt": "2026-10-23T02:43:49.951Z", "publishedAt": "2026-08-18T22:03:24.596Z", "modifiedAt": "2026-08-19T15:50:36.779Z", "state": "published", "provider": "Patchstack", "title": "WordPress HashBar – WordPress Notification Bar plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability", "descriptions": [ { "lang": "en", "value": "Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery.\n\nThis issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "DevItems", "product": "HashBar – WordPress Notification Bar", "sourcePath": "/containers/cna/affected/0", "packageName": "hashbar-wp-notification-bar", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "lessThanOrEqual": "2.0.0", "versionType": "custom", "status": "affected", "changes": [ { "at": "2.0.1", "status": "unaffected" } ] } ] } ], "solutions": [ { "lang": "en", "value": "Update the WordPress HashBar – WordPress Notification Bar Plugin to the latest available version (at least 2.0.1).", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-352", "lang": "en", "description": "CWE-352 Cross-Site Request Forgery (CSRF)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "Patchstack", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://patchstack.com/database/wordpress/plugin/hashbar-wp-notification-bar/vulnerability/wordpress-hashbar-wordpress-notification-bar-plugin-2-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "label": "Patchstack", "tags": [ "vdb-entry" ], "provider": "Patchstack", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66602.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"DevItems\",\"product\":\"HashBar – WordPress Notification Bar\",\"collectionURL\":\"https://wordpress.org/plugins\",\"packageName\":\"hashbar-wp-notification-bar\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\",\"lessThanOrEqual\":\"2.0.0\",\"changes\":[{\"at\":\"2.0.1\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66602.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery.\n\nThis issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66602.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Update the WordPress HashBar – WordPress Notification Bar Plugin to the latest available version (at least 2.0.1).", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66602.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-352\",\"description\":\"CWE-352 Cross-Site Request Forgery (CSRF)\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66602.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseSeverity\":\"HIGH\",\"baseScore\":8.8,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T15:50:36.779Z", "fetchedAt": "2026-10-23T02:43:49.951Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T16:09:59.560Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ], "sourceSummary": "HashBar – WordPress Notification Barに意図しない操作に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "ログイン中の利用者に、意図しない操作を実行させる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:45.753Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "6a1e25427e5171f4b120ebf05cea168a41fb74991961cb510d2fa14cf487e532", "sourceModifiedAt": "2026-10-22T16:09:59.560Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "WordPress 用プラグイン HashBar – WordPress Notification Bar のバージョン 2.0.0 以下に Cross Site Request Forgery (CSRF) の脆弱性が存在します。", "risk": "攻撃者が CSRF を実行できる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "HashBar – WordPress Notification Bar プラグインのバージョンが n/a から 2.0.0 まで（2.0.0 以下）の場合に影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66602.json" ], "evidenceIds": [ "E3", "E2", "E1" ] }, { "text": "公式の対象表：DevItems / HashBar – WordPress Notification Bar。影響ありとして記載：2.0.0以下（原資料では開始版が未指定）。途中の変更：2.0.1から影響なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66602.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66602.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「HashBar – WordPress Notification Bar」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "WordPress HashBar – WordPress Notification Bar プラグインを最新バージョン（少なくとも 2.0.1）に更新してください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66602.json" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2026-66602」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-66602", "https://patchstack.com/database/wordpress/plugin/hashbar-wp-notification-bar/vulnerability/wordpress-hashbar-wordpress-notification-bar-plugin-2-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "https://nvd.nist.gov/vuln/detail/CVE-2026-66602" ] }, { "text": "ファイルとデータベースのバックアップを取り、管理画面の「ダッシュボード」→「更新」で該当プラグインの更新を実行します。更新が表示されない有料製品などは、購入先・開発元の正規の配布経路を利用してください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/", "https://wordpress.org/documentation/article/manage-plugins/" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-66602", "https://patchstack.com/database/wordpress/plugin/hashbar-wp-notification-bar/vulnerability/wordpress-hashbar-wordpress-notification-bar-plugin-2-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "https://nvd.nist.gov/vuln/detail/CVE-2026-66602" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66602.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66602.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-66602", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/hashbar-wp-notification-bar/vulnerability/wordpress-hashbar-wordpress-notification-bar-plugin-2-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66602", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66602.json", "sourceField": "/containers/cna/title", "excerpt": "WordPress HashBar – WordPress Notification Bar plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66602.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery.\n\nThis issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66602.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"DevItems\",\"product\":\"HashBar – WordPress Notification Bar\",\"collectionURL\":\"https://wordpress.org/plugins\",\"packageName\":\"hashbar-wp-notification-bar\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\",\"lessThanOrEqual\":\"2.0.0\",\"changes\":[{\"at\":\"2.0.1\",\"status\":\"unaffected\"}],\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66602.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Update the WordPress HashBar – WordPress Notification Bar Plugin to the latest available version (at least 2.0.1).", "language": "en", "representation": "source_excerpt" } ], "supportRequest": "件名：CVE-2026-66602（HashBar – WordPress Notification Bar）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・HashBar – WordPress Notification Bar プラグインのバージョンが n/a から 2.0.0 まで（2.0.0 以下）の場合に影響を受けます。\n・公式の対象表：DevItems / HashBar – WordPress Notification Bar。影響ありとして記載：2.0.0以下（原資料では開始版が未指定）。途中の変更：2.0.1から影響なし。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-66602", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:45.753Z", "lastSuccess": "2026-10-23T03:22:45.753Z", "sourceCheckedAt": "2026-10-23T02:43:49.951Z", "errorCode": null }, "glossary": [ { "term": "CSRF", "meaning": "ログイン中の人のブラウザーを利用して、その人が意図しない操作をサイトへ送らせる問題です。本人の操作やログインが必要かは、個別の条件を確認します。", "sourceUrl": "https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/CSRF", "kind": "general_definition" } ] } }, { "id": "CVE-2026-74006", "aliases": [], "title": "WP Table Builder：脆弱性情報", "summary": "WordPress 用プラグイン WP Table Builder のバージョン 2.2.0 以下に、アクセス制御が正しく行われない脆弱性が存在します。", "risk": "アクセス制御が欠如しているため、権限のないユーザーがプラグインの機能を不正に利用できる可能性があります。", "product": "WP Table Builder", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 4.3, "cvssVersion": "3.1", "cvssSource": "Patchstack", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "affected": [ { "product": "WP Table Builder", "range": ">= n/a / <= 2.2.0" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74006.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-74006", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/wp-table-builder/vulnerability/wordpress-wp-table-builder-plugin-2-2-0-broken-access-control-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74006", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-18T14:00:44.284Z", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-23T02:43:50.584Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "Contributor Broken Access Control in WP Table Builder <= 2.2.0 versions.", "sourceTitle": "WordPress WP Table Builder plugin <= 2.2.0 - Broken Access Control vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "WP Table Builder", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "wp-table-builder", "product": "WP Table Builder", "versions": [ { "lessThanOrEqual": "2.2.0", "status": "affected", "version": "n/a", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-74006", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74006.json", "fetchedAt": "2026-10-23T02:43:50.584Z", "publishedAt": "2026-08-18T14:00:44.284Z", "modifiedAt": "2026-08-18T19:48:18.310Z", "state": "published", "provider": "Patchstack", "title": "WordPress WP Table Builder plugin <= 2.2.0 - Broken Access Control vulnerability", "descriptions": [ { "lang": "en", "value": "Contributor Broken Access Control in WP Table Builder <= 2.2.0 versions.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "WP Table Builder", "product": "WP Table Builder", "sourcePath": "/containers/cna/affected/0", "packageName": "wp-table-builder", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "lessThanOrEqual": "2.2.0", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-862", "lang": "en", "description": "CWE-862 Missing Authorization", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM", "provider": "Patchstack", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://patchstack.com/database/wordpress/plugin/wp-table-builder/vulnerability/wordpress-wp-table-builder-plugin-2-2-0-broken-access-control-vulnerability?_s_id=cve", "label": "Patchstack", "tags": [ "vdb-entry" ], "provider": "Patchstack", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74006.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"WP Table Builder\",\"collectionURL\":\"https://wordpress.org/plugins\",\"defaultStatus\":\"unaffected\",\"packageName\":\"wp-table-builder\",\"product\":\"WP Table Builder\",\"versions\":[{\"lessThanOrEqual\":\"2.2.0\",\"status\":\"affected\",\"version\":\"n/a\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74006.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Contributor Broken Access Control in WP Table Builder <= 2.2.0 versions.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74006.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-862\",\"description\":\"CWE-862 Missing Authorization\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74006.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\",\"version\":\"3.1\",\"baseSeverity\":\"MEDIUM\",\"baseScore\":4.3,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-18T19:48:18.310Z", "fetchedAt": "2026-10-23T02:43:50.584Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ], "sourceSummary": "WP Table Builderに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:47.510Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "4e97fc299cfeb3564619ccf10f541500b49096a0d828fbce7a3b59e019b4dcb4", "sourceModifiedAt": "2026-10-22T22:10:00.250Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "WordPress 用プラグイン WP Table Builder のバージョン 2.2.0 以下に、アクセス制御が正しく行われない脆弱性が存在します。", "risk": "アクセス制御が欠如しているため、権限のないユーザーがプラグインの機能を不正に利用できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "WP Table Builder プラグインのバージョンが 2.2.0 以下であるすべてのインストールが対象です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74006.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "この脆弱性は「Contributor」権限を持つユーザーに影響します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74006.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "公式の対象表：WP Table Builder / WP Table Builder。影響ありとして記載：2.2.0以下（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74006.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74006.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「WP Table Builder」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74006.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-74006", "https://patchstack.com/database/wordpress/plugin/wp-table-builder/vulnerability/wordpress-wp-table-builder-plugin-2-2-0-broken-access-control-vulnerability?_s_id=cve", "https://nvd.nist.gov/vuln/detail/CVE-2026-74006" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74006.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74006.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-74006", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/wp-table-builder/vulnerability/wordpress-wp-table-builder-plugin-2-2-0-broken-access-control-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74006", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74006.json", "sourceField": "/containers/cna/title", "excerpt": "WordPress WP Table Builder plugin <= 2.2.0 - Broken Access Control vulnerability", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74006.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Contributor Broken Access Control in WP Table Builder <= 2.2.0 versions.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74006.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"WP Table Builder\",\"collectionURL\":\"https://wordpress.org/plugins\",\"defaultStatus\":\"unaffected\",\"packageName\":\"wp-table-builder\",\"product\":\"WP Table Builder\",\"versions\":[{\"lessThanOrEqual\":\"2.2.0\",\"status\":\"affected\",\"version\":\"n/a\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2026-74006（WP Table Builder）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・WP Table Builder プラグインのバージョンが 2.2.0 以下であるすべてのインストールが対象です。\n・この脆弱性は「Contributor」権限を持つユーザーに影響します。\n・公式の対象表：WP Table Builder / WP Table Builder。影響ありとして記載：2.2.0以下（原資料では開始版が未指定）。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-74006", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:47.510Z", "lastSuccess": "2026-10-23T03:22:47.510Z", "sourceCheckedAt": "2026-10-23T02:43:50.584Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-73359", "aliases": [], "title": "WP Cookie Notice for GDPR, CCPA & ePrivacy Consent：ブラウザー上での不正な処理", "summary": "WordPress の WP Cookie Notice for GDPR, CCPA & ePrivacy Consent プラグイン（バージョン 4.3.9 以下）に、購読者（Subscriber）権限でクロスサイトスクリプティング（XSS）脆弱性が存在します。", "risk": "攻撃者が悪意のあるスクリプトを実行でき、ページを閲覧した利用者のブラウザーで不正な処理が行われる可能性があります。", "product": "WP Cookie Notice for GDPR, CCPA & ePrivacy Consent", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "Patchstack", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "affected": [ { "product": "WP Cookie Notice for GDPR, CCPA & ePrivacy Consent", "range": ">= n/a / <= 4.3.9 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 4.4.0から影響なし。版の順序・条件は原文確認）" } ], "fixed": [], "steps": [ "プラグインを最新バージョン（少なくとも 4.4.0）に更新してください。", "「CVE-2026-73359」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "ファイルとデータベースのバックアップを取り、管理画面の「ダッシュボード」→「更新」で該当プラグインの更新を実行します。更新が表示されない有料製品などは、購入先・開発元の正規の配布経路を利用してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73359.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-73359", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/gdpr-cookie-consent/vulnerability/wordpress-wp-cookie-notice-for-gdpr-ccpa-eprivacy-consent-plugin-4-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73359", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-18T14:00:17.072Z", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-23T02:43:50.469Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions.", "sourceTitle": "WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.3.9 - Cross Site Scripting (XSS) vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "WP Legal Pages", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "gdpr-cookie-consent", "product": "WP Cookie Notice for GDPR, CCPA & ePrivacy Consent", "versions": [ { "lessThanOrEqual": "4.3.9", "status": "affected", "version": "n/a", "versionType": "custom", "changes": [ { "at": "4.4.0", "status": "unaffected" } ] } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-73359", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73359.json", "fetchedAt": "2026-10-23T02:43:50.469Z", "publishedAt": "2026-08-18T14:00:17.072Z", "modifiedAt": "2026-08-18T14:38:06.056Z", "state": "published", "provider": "Patchstack", "title": "WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.3.9 - Cross Site Scripting (XSS) vulnerability", "descriptions": [ { "lang": "en", "value": "Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "WP Legal Pages", "product": "WP Cookie Notice for GDPR, CCPA & ePrivacy Consent", "sourcePath": "/containers/cna/affected/0", "packageName": "gdpr-cookie-consent", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "lessThanOrEqual": "4.3.9", "versionType": "custom", "status": "affected", "changes": [ { "at": "4.4.0", "status": "unaffected" } ] } ] } ], "solutions": [ { "lang": "en", "value": "Update the WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent Plugin to the latest available version (at least 4.4.0).", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-79", "lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "baseScore": 6.5, "baseSeverity": "MEDIUM", "provider": "Patchstack", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://patchstack.com/database/wordpress/plugin/gdpr-cookie-consent/vulnerability/wordpress-wp-cookie-notice-for-gdpr-ccpa-eprivacy-consent-plugin-4-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve", "label": "Patchstack", "tags": [ "vdb-entry" ], "provider": "Patchstack", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73359.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"WP Legal Pages\",\"collectionURL\":\"https://wordpress.org/plugins\",\"defaultStatus\":\"unaffected\",\"packageName\":\"gdpr-cookie-consent\",\"product\":\"WP Cookie Notice for GDPR, CCPA & ePrivacy Consent\",\"versions\":[{\"lessThanOrEqual\":\"4.3.9\",\"status\":\"affected\",\"version\":\"n/a\",\"versionType\":\"custom\",\"changes\":[{\"at\":\"4.4.0\",\"status\":\"unaffected\"}]}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73359.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73359.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Update the WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent Plugin to the latest available version (at least 4.4.0).", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73359.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-79\",\"description\":\"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73359.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\",\"version\":\"3.1\",\"baseSeverity\":\"MEDIUM\",\"baseScore\":6.5,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-18T14:38:06.056Z", "fetchedAt": "2026-10-23T02:43:50.469Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ], "sourceSummary": "WP Cookie Notice for GDPR, CCPA & ePrivacy Consentにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:47.689Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "a334c01a6974846e0b21e4d75f13c839bd8fcfcc73ca2c321608396a533faf72", "sourceModifiedAt": "2026-10-22T22:10:00.250Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "WordPress の WP Cookie Notice for GDPR, CCPA & ePrivacy Consent プラグイン（バージョン 4.3.9 以下）に、購読者（Subscriber）権限でクロスサイトスクリプティング（XSS）脆弱性が存在します。", "risk": "攻撃者が悪意のあるスクリプトを実行でき、ページを閲覧した利用者のブラウザーで不正な処理が行われる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "バージョン 4.3.9 以下の WP Cookie Notice for GDPR, CCPA & ePrivacy Consent プラグインは影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73359.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "公式の対象表：WP Legal Pages / WP Cookie Notice for GDPR, CCPA & ePrivacy Consent。影響ありとして記載：4.3.9以下（原資料では開始版が未指定）。途中の変更：4.4.0から影響なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73359.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73359.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「WP Cookie Notice for GDPR, CCPA & ePrivacy Consent」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "プラグインを最新バージョン（少なくとも 4.4.0）に更新してください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73359.json" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2026-73359」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-73359", "https://patchstack.com/database/wordpress/plugin/gdpr-cookie-consent/vulnerability/wordpress-wp-cookie-notice-for-gdpr-ccpa-eprivacy-consent-plugin-4-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve", "https://nvd.nist.gov/vuln/detail/CVE-2026-73359" ] }, { "text": "ファイルとデータベースのバックアップを取り、管理画面の「ダッシュボード」→「更新」で該当プラグインの更新を実行します。更新が表示されない有料製品などは、購入先・開発元の正規の配布経路を利用してください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/", "https://wordpress.org/documentation/article/manage-plugins/" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-73359", "https://patchstack.com/database/wordpress/plugin/gdpr-cookie-consent/vulnerability/wordpress-wp-cookie-notice-for-gdpr-ccpa-eprivacy-consent-plugin-4-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve", "https://nvd.nist.gov/vuln/detail/CVE-2026-73359" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73359.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73359.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-73359", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/gdpr-cookie-consent/vulnerability/wordpress-wp-cookie-notice-for-gdpr-ccpa-eprivacy-consent-plugin-4-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73359", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73359.json", "sourceField": "/containers/cna/title", "excerpt": "WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.3.9 - Cross Site Scripting (XSS) vulnerability", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73359.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73359.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"WP Legal Pages\",\"collectionURL\":\"https://wordpress.org/plugins\",\"defaultStatus\":\"unaffected\",\"packageName\":\"gdpr-cookie-consent\",\"product\":\"WP Cookie Notice for GDPR, CCPA & ePrivacy Consent\",\"versions\":[{\"lessThanOrEqual\":\"4.3.9\",\"status\":\"affected\",\"version\":\"n/a\",\"versionType\":\"custom\",\"changes\":[{\"at\":\"4.4.0\",\"status\":\"unaffected\"}]}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73359.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Update the WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent Plugin to the latest available version (at least 4.4.0).", "language": "en", "representation": "source_excerpt" } ], "supportRequest": "件名：CVE-2026-73359（WP Cookie Notice for GDPR, CCPA & ePrivacy Consent）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・バージョン 4.3.9 以下の WP Cookie Notice for GDPR, CCPA & ePrivacy Consent プラグインは影響を受けます。\n・公式の対象表：WP Legal Pages / WP Cookie Notice for GDPR, CCPA & ePrivacy Consent。影響ありとして記載：4.3.9以下（原資料では開始版が未指定）。途中の変更：4.4.0から影響なし。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-73359", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:47.689Z", "lastSuccess": "2026-10-23T03:22:47.689Z", "sourceCheckedAt": "2026-10-23T02:43:50.469Z", "errorCode": null }, "glossary": [ { "term": "XSS", "meaning": "ページに紛れ込ませた不正な処理が、ページを表示した人のブラウザーで動く問題です。誰が仕込めるか、どの画面を表示すると動くかが判断のポイントです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/79.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-73351", "aliases": [], "title": "WordPress Social Login and Register：ブラウザー上での不正な処理", "summary": "WordPress Social Login and Register プラグインのバージョン 7.8.1 以下において、認証されていないユーザーがクロスサイトスクリプティング（XSS）を実行できる脆弱性があります。", "risk": "攻撃者が被害者のブラウザー上で任意のスクリプトを実行させ、情報漏洩や操作が行われる可能性があります。", "product": "WordPress Social Login and Register", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.1, "cvssVersion": "3.1", "cvssSource": "Patchstack", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "affected": [ { "product": "WordPress Social Login and Register", "range": ">= n/a / <= 7.8.1 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 7.8.2から影響なし。版の順序・条件は原文確認）" } ], "fixed": [], "steps": [ "WordPress Social Login and Register プラグインを最新バージョン（少なくとも 7.8.2）に更新する。", "「CVE-2026-73351」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "ファイルとデータベースのバックアップを取り、管理画面の「ダッシュボード」→「更新」で該当プラグインの更新を実行します。更新が表示されない有料製品などは、購入先・開発元の正規の配布経路を利用してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-73351", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/miniorange-login-openid/vulnerability/wordpress-wordpress-social-login-and-register-plugin-7-8-1-cross-site-scripting-xss-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73351", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-18T14:00:12.783Z", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-23T02:43:50.462Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.", "sourceTitle": "WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "miniOrange", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "miniorange-login-openid", "product": "WordPress Social Login and Register", "versions": [ { "lessThanOrEqual": "7.8.1", "status": "affected", "version": "n/a", "versionType": "custom", "changes": [ { "at": "7.8.2", "status": "unaffected" } ] } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-73351", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json", "fetchedAt": "2026-10-23T02:43:50.462Z", "publishedAt": "2026-08-18T14:00:12.783Z", "modifiedAt": "2026-08-18T14:37:41.572Z", "state": "published", "provider": "Patchstack", "title": "WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability", "descriptions": [ { "lang": "en", "value": "Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "miniOrange", "product": "WordPress Social Login and Register", "sourcePath": "/containers/cna/affected/0", "packageName": "miniorange-login-openid", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "lessThanOrEqual": "7.8.1", "versionType": "custom", "status": "affected", "changes": [ { "at": "7.8.2", "status": "unaffected" } ] } ] } ], "solutions": [ { "lang": "en", "value": "Update the WordPress WordPress Social Login and Register Plugin to the latest available version (at least 7.8.2).", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-79", "lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "baseScore": 7.1, "baseSeverity": "HIGH", "provider": "Patchstack", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://patchstack.com/database/wordpress/plugin/miniorange-login-openid/vulnerability/wordpress-wordpress-social-login-and-register-plugin-7-8-1-cross-site-scripting-xss-vulnerability?_s_id=cve", "label": "Patchstack", "tags": [ "vdb-entry" ], "provider": "Patchstack", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"miniOrange\",\"collectionURL\":\"https://wordpress.org/plugins\",\"defaultStatus\":\"unaffected\",\"packageName\":\"miniorange-login-openid\",\"product\":\"WordPress Social Login and Register\",\"versions\":[{\"lessThanOrEqual\":\"7.8.1\",\"status\":\"affected\",\"version\":\"n/a\",\"versionType\":\"custom\",\"changes\":[{\"at\":\"7.8.2\",\"status\":\"unaffected\"}]}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Update the WordPress WordPress Social Login and Register Plugin to the latest available version (at least 7.8.2).", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-79\",\"description\":\"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\",\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.1,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-18T14:37:41.572Z", "fetchedAt": "2026-10-23T02:43:50.462Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ], "sourceSummary": "WordPress Social Login and Registerにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:48.812Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "3378f9976c3f0e6bb03fd500f0550790b1cb1b700164141b124f41cdedae8bed", "sourceModifiedAt": "2026-10-22T22:10:00.250Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "WordPress Social Login and Register プラグインのバージョン 7.8.1 以下において、認証されていないユーザーがクロスサイトスクリプティング（XSS）を実行できる脆弱性があります。", "risk": "攻撃者が被害者のブラウザー上で任意のスクリプトを実行させ、情報漏洩や操作が行われる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E3" ], "applicability": [ { "text": "WordPress Social Login and Register プラグインのバージョン 7.8.1 以下が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "認証されていないユーザーでもこの脆弱性を利用できます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：miniOrange / WordPress Social Login and Register。影響ありとして記載：7.8.1以下（原資料では開始版が未指定）。途中の変更：7.8.2から影響なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json" ], "evidenceIds": [ "E4" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「WordPress Social Login and Register」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "WordPress Social Login and Register プラグインを最新バージョン（少なくとも 7.8.2）に更新する。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json" ], "evidenceIds": [ "E5" ] }, { "text": "「CVE-2026-73351」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-73351", "https://patchstack.com/database/wordpress/plugin/miniorange-login-openid/vulnerability/wordpress-wordpress-social-login-and-register-plugin-7-8-1-cross-site-scripting-xss-vulnerability?_s_id=cve", "https://nvd.nist.gov/vuln/detail/CVE-2026-73351" ] }, { "text": "ファイルとデータベースのバックアップを取り、管理画面の「ダッシュボード」→「更新」で該当プラグインの更新を実行します。更新が表示されない有料製品などは、購入先・開発元の正規の配布経路を利用してください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/", "https://wordpress.org/documentation/article/manage-plugins/" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-73351", "https://patchstack.com/database/wordpress/plugin/miniorange-login-openid/vulnerability/wordpress-wordpress-social-login-and-register-plugin-7-8-1-cross-site-scripting-xss-vulnerability?_s_id=cve", "https://nvd.nist.gov/vuln/detail/CVE-2026-73351" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-73351", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/miniorange-login-openid/vulnerability/wordpress-wordpress-social-login-and-register-plugin-7-8-1-cross-site-scripting-xss-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73351", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json", "sourceField": "/containers/cna/title", "excerpt": "WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json", "sourceField": "/containers/cna/problemTypes/0/descriptions/0", "excerpt": "{\"lang\":\"en\",\"cweId\":\"CWE-79\",\"description\":\"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\",\"type\":\"CWE\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"miniOrange\",\"collectionURL\":\"https://wordpress.org/plugins\",\"defaultStatus\":\"unaffected\",\"packageName\":\"miniorange-login-openid\",\"product\":\"WordPress Social Login and Register\",\"versions\":[{\"lessThanOrEqual\":\"7.8.1\",\"status\":\"affected\",\"version\":\"n/a\",\"versionType\":\"custom\",\"changes\":[{\"at\":\"7.8.2\",\"status\":\"unaffected\"}]}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73351.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Update the WordPress WordPress Social Login and Register Plugin to the latest available version (at least 7.8.2).", "language": "en", "representation": "source_excerpt" } ], "supportRequest": "件名：CVE-2026-73351（WordPress Social Login and Register）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・WordPress Social Login and Register プラグインのバージョン 7.8.1 以下が影響を受けます。\n・認証されていないユーザーでもこの脆弱性を利用できます。\n・公式の対象表：miniOrange / WordPress Social Login and Register。影響ありとして記載：7.8.1以下（原資料では開始版が未指定）。途中の変更：7.8.2から影響なし。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-73351", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:48.812Z", "lastSuccess": "2026-10-23T03:22:48.812Z", "sourceCheckedAt": "2026-10-23T02:43:50.462Z", "errorCode": null }, "glossary": [ { "term": "XSS", "meaning": "ページに紛れ込ませた不正な処理が、ページを表示した人のブラウザーで動く問題です。誰が仕込めるか、どの画面を表示すると動くかが判断のポイントです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/79.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-73343", "aliases": [], "title": "WP Compress：コード実行", "summary": "WordPress 用プラグイン WP Compress のバージョン 7.20.01 未満に認証なしでリモートコード実行が可能な脆弱性が存在します。", "risk": "攻撃者が認証なしでサーバー上で任意のコードを実行できる可能性があります。", "product": "WP Compress", "category": "wordpress", "component": "plugin", "severity": "critical", "cvss": 10, "cvssVersion": "3.1", "cvssSource": "Patchstack", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "affected": [ { "product": "WP Compress", "range": ">= n/a / < 7.20.01 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 7.20.01から影響なし。版の順序・条件は原文確認）" } ], "fixed": [], "steps": [ "WordPress WP Compress プラグインを最新バージョン（少なくとも 7.20.01）に更新してください。", "「CVE-2026-73343」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "ファイルとデータベースのバックアップを取り、管理画面の「ダッシュボード」→「更新」で該当プラグインの更新を実行します。更新が表示されない有料製品などは、購入先・開発元の正規の配布経路を利用してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-73343", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/wp-compress-image-optimizer/vulnerability/wordpress-wp-compress-plugin-7-20-01-remote-code-execution-rce-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73343", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-18T14:00:09.450Z", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-23T02:43:50.450Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.", "sourceTitle": "WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "AresIT", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "wp-compress-image-optimizer", "product": "WP Compress", "versions": [ { "lessThan": "7.20.01", "status": "affected", "version": "n/a", "versionType": "custom", "changes": [ { "at": "7.20.01", "status": "unaffected" } ] } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-73343", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json", "fetchedAt": "2026-10-23T02:43:50.450Z", "publishedAt": "2026-08-18T14:00:09.450Z", "modifiedAt": "2026-08-18T19:48:21.270Z", "state": "published", "provider": "Patchstack", "title": "WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability", "descriptions": [ { "lang": "en", "value": "Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "AresIT", "product": "WP Compress", "sourcePath": "/containers/cna/affected/0", "packageName": "wp-compress-image-optimizer", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "lessThan": "7.20.01", "versionType": "custom", "status": "affected", "changes": [ { "at": "7.20.01", "status": "unaffected" } ] } ] } ], "solutions": [ { "lang": "en", "value": "Update the WordPress WP Compress Plugin to the latest available version (at least 7.20.01).", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-94", "lang": "en", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "Patchstack", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://patchstack.com/database/wordpress/plugin/wp-compress-image-optimizer/vulnerability/wordpress-wp-compress-plugin-7-20-01-remote-code-execution-rce-vulnerability?_s_id=cve", "label": "Patchstack", "tags": [ "vdb-entry" ], "provider": "Patchstack", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"AresIT\",\"collectionURL\":\"https://wordpress.org/plugins\",\"defaultStatus\":\"unaffected\",\"packageName\":\"wp-compress-image-optimizer\",\"product\":\"WP Compress\",\"versions\":[{\"lessThan\":\"7.20.01\",\"status\":\"affected\",\"version\":\"n/a\",\"versionType\":\"custom\",\"changes\":[{\"at\":\"7.20.01\",\"status\":\"unaffected\"}]}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Update the WordPress WP Compress Plugin to the latest available version (at least 7.20.01).", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-94\",\"description\":\"CWE-94 Improper Control of Generation of Code ('Code Injection')\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"version\":\"3.1\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":10,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-18T19:48:21.270Z", "fetchedAt": "2026-10-23T02:43:50.450Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ], "sourceSummary": "WP Compressにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:48.847Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "161269fbdbed67942cb647d68d6ede94f32a61363d49bce7ce8063c0790ef492", "sourceModifiedAt": "2026-10-22T22:10:00.250Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "WordPress 用プラグイン WP Compress のバージョン 7.20.01 未満に認証なしでリモートコード実行が可能な脆弱性が存在します。", "risk": "攻撃者が認証なしでサーバー上で任意のコードを実行できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "WP Compress プラグインのバージョンが 7.20.01 未満である場合に影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "攻撃は認証されていないユーザーでも実行可能です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：AresIT / WP Compress。影響ありとして記載：7.20.01未満（原資料では開始版が未指定）。途中の変更：7.20.01から影響なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「WP Compress」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "WordPress WP Compress プラグインを最新バージョン（少なくとも 7.20.01）に更新してください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2026-73343」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-73343", "https://patchstack.com/database/wordpress/plugin/wp-compress-image-optimizer/vulnerability/wordpress-wp-compress-plugin-7-20-01-remote-code-execution-rce-vulnerability?_s_id=cve", "https://nvd.nist.gov/vuln/detail/CVE-2026-73343" ] }, { "text": "ファイルとデータベースのバックアップを取り、管理画面の「ダッシュボード」→「更新」で該当プラグインの更新を実行します。更新が表示されない有料製品などは、購入先・開発元の正規の配布経路を利用してください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/", "https://wordpress.org/documentation/article/manage-plugins/" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-73343", "https://patchstack.com/database/wordpress/plugin/wp-compress-image-optimizer/vulnerability/wordpress-wp-compress-plugin-7-20-01-remote-code-execution-rce-vulnerability?_s_id=cve", "https://nvd.nist.gov/vuln/detail/CVE-2026-73343" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-73343", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/wp-compress-image-optimizer/vulnerability/wordpress-wp-compress-plugin-7-20-01-remote-code-execution-rce-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73343", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json", "sourceField": "/containers/cna/title", "excerpt": "WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"AresIT\",\"collectionURL\":\"https://wordpress.org/plugins\",\"defaultStatus\":\"unaffected\",\"packageName\":\"wp-compress-image-optimizer\",\"product\":\"WP Compress\",\"versions\":[{\"lessThan\":\"7.20.01\",\"status\":\"affected\",\"version\":\"n/a\",\"versionType\":\"custom\",\"changes\":[{\"at\":\"7.20.01\",\"status\":\"unaffected\"}]}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73343.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Update the WordPress WP Compress Plugin to the latest available version (at least 7.20.01).", "language": "en", "representation": "source_excerpt" } ], "supportRequest": "件名：CVE-2026-73343（WP Compress）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・WP Compress プラグインのバージョンが 7.20.01 未満である場合に影響を受けます。\n・攻撃は認証されていないユーザーでも実行可能です。\n・公式の対象表：AresIT / WP Compress。影響ありとして記載：7.20.01未満（原資料では開始版が未指定）。途中の変更：7.20.01から影響なし。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-73343", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:48.847Z", "lastSuccess": "2026-10-23T03:22:48.847Z", "sourceCheckedAt": "2026-10-23T02:43:50.450Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-73342", "aliases": [], "title": "WP Multilang：ブラウザー上での不正な処理", "summary": "WordPress WP Multilangプラグインのバージョン2.4.31以下に、認証されていないユーザーが利用できるクロスサイトスクリプティング（XSS）の脆弱性があります。", "risk": "ページを表示した人のブラウザーで不正なスクリプトが実行される可能性があります。", "product": "WP Multilang", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.1, "cvssVersion": "3.1", "cvssSource": "Patchstack", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "affected": [ { "product": "WP Multilang", "range": ">= n/a / <= 2.4.31 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 2.4.32から影響なし。版の順序・条件は原文確認）" } ], "fixed": [], "steps": [ "WordPress WP Multilangプラグインを最新バージョン（少なくとも2.4.32）に更新する。", "「CVE-2026-73342」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "ファイルとデータベースのバックアップを取り、管理画面の「ダッシュボード」→「更新」で該当プラグインの更新を実行します。更新が表示されない有料製品などは、購入先・開発元の正規の配布経路を利用してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-73342", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/wp-multilang/vulnerability/wordpress-wp-multilang-plugin-2-4-31-cross-site-scripting-xss-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73342", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "publishedAt": "2026-08-18T14:00:08.590Z", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-23T02:43:50.440Z", "exploitStatus": "unknown", "sources": [ "CVE", "NVD" ], "originalText": "Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.", "sourceTitle": "WordPress WP Multilang plugin <= 2.4.31 - Cross Site Scripting (XSS) vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Magazine3", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "wp-multilang", "product": "WP Multilang", "versions": [ { "lessThanOrEqual": "2.4.31", "status": "affected", "version": "n/a", "versionType": "custom", "changes": [ { "at": "2.4.32", "status": "unaffected" } ] } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-73342", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "fetchedAt": "2026-10-23T02:43:50.440Z", "publishedAt": "2026-08-18T14:00:08.590Z", "modifiedAt": "2026-08-18T14:37:12.251Z", "state": "published", "provider": "Patchstack", "title": "WordPress WP Multilang plugin <= 2.4.31 - Cross Site Scripting (XSS) vulnerability", "descriptions": [ { "lang": "en", "value": "Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Magazine3", "product": "WP Multilang", "sourcePath": "/containers/cna/affected/0", "packageName": "wp-multilang", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "lessThanOrEqual": "2.4.31", "versionType": "custom", "status": "affected", "changes": [ { "at": "2.4.32", "status": "unaffected" } ] } ] } ], "solutions": [ { "lang": "en", "value": "Update the WordPress WP Multilang Plugin to the latest available version (at least 2.4.32).", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-79", "lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "baseScore": 7.1, "baseSeverity": "HIGH", "provider": "Patchstack", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://patchstack.com/database/wordpress/plugin/wp-multilang/vulnerability/wordpress-wp-multilang-plugin-2-4-31-cross-site-scripting-xss-vulnerability?_s_id=cve", "label": "Patchstack", "tags": [ "vdb-entry" ], "provider": "Patchstack", "sourcePath": "/containers/cna/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Magazine3\",\"collectionURL\":\"https://wordpress.org/plugins\",\"defaultStatus\":\"unaffected\",\"packageName\":\"wp-multilang\",\"product\":\"WP Multilang\",\"versions\":[{\"lessThanOrEqual\":\"2.4.31\",\"status\":\"affected\",\"version\":\"n/a\",\"versionType\":\"custom\",\"changes\":[{\"at\":\"2.4.32\",\"status\":\"unaffected\"}]}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Update the WordPress WP Multilang Plugin to the latest available version (at least 2.4.32).", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-79\",\"description\":\"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\",\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.1,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-18T14:37:12.251Z", "fetchedAt": "2026-10-23T02:43:50.440Z", "state": "published" }, { "source": "NVD", "modifiedAt": "2026-10-22T22:10:00.250Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ], "sourceSummary": "WP Multilangにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:22:48.853Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "9de90164267fa7f4a97802eb25d5708e5fe62dc5ceebc7a1dd9bfc4f3197a420", "sourceModifiedAt": "2026-10-22T22:10:00.250Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "WordPress WP Multilangプラグインのバージョン2.4.31以下に、認証されていないユーザーが利用できるクロスサイトスクリプティング（XSS）の脆弱性があります。", "risk": "ページを表示した人のブラウザーで不正なスクリプトが実行される可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "WP Multilangプラグインのバージョンが2.4.31以下である場合に影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "公式の対象表：Magazine3 / WP Multilang。影響ありとして記載：2.4.31以下（原資料では開始版が未指定）。途中の変更：2.4.32から影響なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressの管理画面にログインし、「プラグイン」→「インストール済みプラグイン」を開きます。「WP Multilang」と同じ製品名・開発元の項目を探し、表示されているバージョンを控えてください。停止中のプラグインも一覧に含めて確認します。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/" ] }, { "text": "管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://wordpress.org/documentation/article/plugins-screen/" ] } ], "actions": [ { "text": "WordPress WP Multilangプラグインを最新バージョン（少なくとも2.4.32）に更新する。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2026-73342」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-73342", "https://patchstack.com/database/wordpress/plugin/wp-multilang/vulnerability/wordpress-wp-multilang-plugin-2-4-31-cross-site-scripting-xss-vulnerability?_s_id=cve", "https://nvd.nist.gov/vuln/detail/CVE-2026-73342" ] }, { "text": "ファイルとデータベースのバックアップを取り、管理画面の「ダッシュボード」→「更新」で該当プラグインの更新を実行します。更新が表示されない有料製品などは、購入先・開発元の正規の配布経路を利用してください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/", "https://wordpress.org/documentation/article/manage-plugins/" ] } ], "temporaryMitigations": [ { "text": "更新できない場合は、対象機能の停止や公開範囲の制限が使えるかを管理担当者と検討し、実施内容と更新予定日を記録してください。プラグインの「無効化」だけでこの脆弱性を防げるかは個別に確認が必要です。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/plugins-screen/", "https://www.cve.org/CVERecord?id=CVE-2026-73342", "https://patchstack.com/database/wordpress/plugin/wp-multilang/vulnerability/wordpress-wp-multilang-plugin-2-4-31-cross-site-scripting-xss-vulnerability?_s_id=cve", "https://nvd.nist.gov/vuln/detail/CVE-2026-73342" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/updating-wordpress/", "https://wordpress.org/documentation/article/dashboard-updates-screen/" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "label": "CVE：Patchstack" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-73342", "label": "CVE公式レコード" }, { "url": "https://patchstack.com/database/wordpress/plugin/wp-multilang/vulnerability/wordpress-wp-multilang-plugin-2-4-31-cross-site-scripting-xss-vulnerability?_s_id=cve", "label": "audit@patchstack.com" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73342", "label": "NVDの原文" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/plugins-screen/", "label": "WordPress公式：プラグイン一覧" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://wordpress.org/documentation/article/updating-wordpress/", "label": "WordPress公式：本体の更新" }, { "url": "https://wordpress.org/documentation/article/dashboard-updates-screen/", "label": "WordPress公式：更新画面" }, { "url": "https://wordpress.org/documentation/article/manage-plugins/", "label": "WordPress公式：プラグインの確認と更新" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourceField": "/containers/cna/title", "excerpt": "WordPress WP Multilang plugin <= 2.4.31 - Cross Site Scripting (XSS) vulnerability", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.", "language": "en", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Magazine3\",\"collectionURL\":\"https://wordpress.org/plugins\",\"defaultStatus\":\"unaffected\",\"packageName\":\"wp-multilang\",\"product\":\"WP Multilang\",\"versions\":[{\"lessThanOrEqual\":\"2.4.31\",\"status\":\"affected\",\"version\":\"n/a\",\"versionType\":\"custom\",\"changes\":[{\"at\":\"2.4.32\",\"status\":\"unaffected\"}]}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73342.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Update the WordPress WP Multilang Plugin to the latest available version (at least 2.4.32).", "language": "en", "representation": "source_excerpt" } ], "supportRequest": "件名：CVE-2026-73342（WP Multilang）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・WP Multilangプラグインのバージョンが2.4.31以下である場合に影響を受けます。\n・公式の対象表：Magazine3 / WP Multilang。影響ありとして記載：2.4.31以下（原資料では開始版が未指定）。途中の変更：2.4.32から影響なし。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-73342", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:22:48.853Z", "lastSuccess": "2026-10-23T03:22:48.853Z", "sourceCheckedAt": "2026-10-23T02:43:50.440Z", "errorCode": null }, "glossary": [ { "term": "XSS", "meaning": "ページに紛れ込ませた不正な処理が、ページを表示した人のブラウザーで動く問題です。誰が仕込めるか、どの画面を表示すると動くかが判断のポイントです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/79.html", "kind": "general_definition" } ] } } ], "total": 2187, "limit": 20, "offset": 440, "filters": { "product": "all", "type": "all", "q": "", "page": 23 }, "pagination": { "page": 23, "pageSize": 20, "totalPages": 110 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-23T15:17:49.690Z", "lastAttempt": "2026-10-23T15:17:49.690Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "error", "lastSuccess": "2026-10-23T14:17:50.525Z", "lastAttempt": "2026-10-23T15:17:49.690Z", "error": "GitHub API取得上限に到達 (2026-10-23T15:20:07.000Z以降に再取得)", "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-23T15:17:49.690Z", "lastAttempt": "2026-10-23T15:17:49.690Z", "error": null, "recordCount": 1754, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "error", "lastSuccess": "2026-10-23T14:17:50.525Z", "lastAttempt": "2026-10-23T15:17:49.690Z", "error": "HTTP 524", "recordCount": 1, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-23T13:02:54.887Z 〜 2026-10-23T14:17:50.525Z、全製品の変更 240/240件まで確認、対象1件反映。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-23T15:17:49.690Z", "lastAttempt": "2026-10-23T15:17:49.690Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。 PHP公式ニュース経由で候補補足（先頭20項目から2件）。GitHub全件代替ではない。CVE取得は既存候補と合わせ最大6件。", "cursor": null, "freshness": "fresh", "stale": false } ] }