{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2026-100145", "aliases": [], "title": "Synchrony Financing：脆弱性情報", "summary": "Synchrony Financingに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Synchrony Financing", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "affected": [ { "product": "Synchrony Financing", "range": ">= 1.0.5 / < 1.1.2" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100145", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/87d37c99-1229-4747-b562-5151aa9e92f2/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-21T06:16:44.480Z", "modifiedAt": "2026-10-21T18:37:38.700Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Synchrony Financing WordPress plugin before 1.1.2 does not properly authorise requests to one of its REST routes that modifies WooCommerce orders, allowing unauthenticated attackers to reassign any order to an account they control, tamper with its details, and read the associated customer's personal data.", "sourceTitle": "CVE-2026-100145", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Synchrony Financing", "defaultStatus": "unaffected", "versions": [ { "version": "1.0.5", "lessThan": "1.1.2", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-21T18:37:38.700Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-82814", "aliases": [], "title": "Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More / Duplicator Pro：脆弱性情報", "summary": "Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More / Duplicator Proに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More / Duplicator Pro", "category": "wordpress", "component": "unknown", "severity": "high", "cvss": 8.8, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "affected": [ { "product": "Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More", "range": "<= 1.5.17" }, { "product": "Duplicator Pro", "range": "<= 4.6.10" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82814", "label": "NVDの原文" }, { "url": "https://duplicator.com/knowledge-base/changelog/#v5-0-0", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3687092/duplicator", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/767fb03a-58a3-464b-98b2-5378cfec09ae?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-21T02:17:07.423Z", "modifiedAt": "2026-10-22T19:18:02.413Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.5.17 and 4.6.10, respectively, via deserialization of untrusted database content in DUPX_UpdateEngine::unserializeTest() during migration. This allows unauthenticated attackers to store a serialized object in public site content before an administrator builds a package and later performs a migration or import that runs database search-and-replace. Duplicator Free bundles a Requests 1.7 POP chain that permits attacker-selected callbacks, resulting in direct operating-system command execution. Duplicator Pro bundles an IndexList destructor gadget that permits deletion of an attacker-selected existing file when its containing directory is writable by the installer PHP process; deletion of wp-config.php can expose the setup wizard and lead to site takeover and code execution if the attacker reaches it first and supplies a reachable database they control. The package must be created after the carrier is stored, and a later administrator migration action is required.", "sourceTitle": "CVE-2026-82814", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "smub", "product": "Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "1.5.17", "versionType": "semver", "status": "affected" } ] }, { "vendor": "Duplicator", "product": "Duplicator Pro", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "4.6.10", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-22T19:18:02.413Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ] }, { "id": "JVNVU93110597", "aliases": [], "title": "Apache Tomcatにおける複数の脆弱性（2026年10月20日）", "summary": "The Apache Software Foundationから、Apache Tomcatの8件の脆弱性に対してアドバイザリが公開されました。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Apache Tomcat", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://jvn.jp/vu/JVNVU93110597/", "label": "JVNの原文" } ], "publishedAt": "2026-10-21T00:30:30.000Z", "modifiedAt": "2026-10-21T00:30:30.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "unknown", "sources": [ "JVN" ], "originalText": "The Apache Software Foundationから、Apache Tomcatの8件の脆弱性に対してアドバイザリが公開されました。", "sourceTitle": "Apache Tomcatにおける複数の脆弱性（2026年10月20日）", "summaryMethod": "JVN掲載の日本語概要。複数のCVEを含む記事は一括情報です。", "state": "published", "sourceSnapshots": [ { "source": "JVN", "modifiedAt": "2026-10-21T00:30:30.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "JVNVU90998702", "aliases": [], "title": "CISA ICS Advisory / ICS Medical Advisory（2026年10月20日）", "summary": "米国CISAがCISA ICS Advisory / ICS Medical Advisoryを公表しました。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "CISA ICS Advisory / ICS Medical Advisory（2026年10月20日）", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://jvn.jp/vu/JVNVU90998702/", "label": "JVNの原文" } ], "publishedAt": "2026-10-21T00:30:15.000Z", "modifiedAt": "2026-10-21T00:30:15.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "unknown", "sources": [ "JVN" ], "originalText": "米国CISAがCISA ICS Advisory / ICS Medical Advisoryを公表しました。", "sourceTitle": "CISA ICS Advisory / ICS Medical Advisory（2026年10月20日）", "summaryMethod": "JVN掲載の日本語概要。複数のCVEを含む記事は一括情報です。", "state": "published", "sourceSnapshots": [ { "source": "JVN", "modifiedAt": "2026-10-21T00:30:15.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "JVNVU92078426", "aliases": [], "title": "Xerj Console APIにおける認証回避の脆弱性", "summary": "CERT/CCから本件に関するアドバイザリが公表されました。", "risk": "ログインなどの認証を回避され、不正な操作につながる可能性があります。", "product": "Xerj Console API", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://jvn.jp/vu/JVNVU92078426/", "label": "JVNの原文" } ], "publishedAt": "2026-10-21T00:30:00.000Z", "modifiedAt": "2026-10-21T00:30:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "unknown", "sources": [ "JVN" ], "originalText": "CERT/CCから本件に関するアドバイザリが公表されました。", "sourceTitle": "Xerj Console APIにおける認証回避の脆弱性", "summaryMethod": "JVN掲載の日本語概要。複数のCVEを含む記事は一括情報です。", "state": "published", "sourceSnapshots": [ { "source": "JVN", "modifiedAt": "2026-10-21T00:30:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2016-20103", "aliases": [], "title": "Cherry Plugin：ファイルへの不正アクセス", "summary": "Cherry Pluginにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "許可していない場所のファイルにアクセスされる可能性があります。", "product": "Cherry Plugin", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 8.7, "cvssVersion": "4.0", "cvssSource": "disclosure@vulncheck.com", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "affected": [ { "product": "Cherry Plugin", "range": ">= 1.1 / < 1.2.7" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-20103", "label": "NVDの原文" }, { "url": "https://github.com/CherryFramework/cherry-plugin/commit/69a3f7b", "label": "disclosure@vulncheck.com" }, { "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/cherry-file-download.yaml", "label": "disclosure@vulncheck.com" }, { "url": "https://wpscan.com/vulnerability/90034817-dee7-40c9-80a2-1f1cd1d033ee", "label": "disclosure@vulncheck.com" }, { "url": "https://www.vulncheck.com/advisories/cherry-plugin-for-wordpress-1.2.7-path-traversal-via-download-content-php", "label": "disclosure@vulncheck.com" } ], "publishedAt": "2026-10-20T21:17:14.043Z", "modifiedAt": "2026-10-22T17:40:46.877Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like ../../../../../wp-config.php to read database credentials, since the script passes input directly to readfile(). Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.", "sourceTitle": "CVE-2016-20103", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Cherry Team", "product": "Cherry Plugin", "defaultStatus": "unaffected", "versions": [ { "version": "1.1", "lessThan": "1.2.7", "versionType": "custom", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-22T17:40:46.877Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2016-20101", "aliases": [], "title": "Issuu Panel：脆弱性情報", "summary": "Issuu Panelに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Issuu Panel", "category": "wordpress", "component": "plugin", "severity": "critical", "cvss": 9.2, "cvssVersion": "4.0", "cvssSource": "disclosure@vulncheck.com", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "affected": [ { "product": "Issuu Panel", "range": ">= 1.0 / < 1.6.6" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-20101", "label": "NVDの原文" }, { "url": "https://cxsecurity.com/issue/WLB-2016030131", "label": "disclosure@vulncheck.com" }, { "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/issuu-panel-lfi.yaml", "label": "disclosure@vulncheck.com" }, { "url": "https://packetstorm.news/files/id/136398/", "label": "disclosure@vulncheck.com" }, { "url": "https://wordpress.org/plugins/issuu-panel/", "label": "disclosure@vulncheck.com" }, { "url": "https://www.vulncheck.com/advisories/issuu-panel-wordpress-plugin-1.6.6-file-inclusion-via-ajax-docs-php", "label": "disclosure@vulncheck.com" } ], "publishedAt": "2026-10-20T21:17:13.727Z", "modifiedAt": "2026-10-22T17:40:46.877Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspath' parameter. Attackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value passed to require() to execute remote PHP code or include local files. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.", "sourceTitle": "CVE-2016-20101", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Pedro Marcelo", "product": "Issuu Panel", "defaultStatus": "unaffected", "versions": [ { "version": "1.0", "lessThan": "1.6.6", "versionType": "custom", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-22T17:40:46.877Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2016-20100", "aliases": [], "title": "Memphis Documents Library：ファイルへの不正アクセス", "summary": "Memphis Documents Libraryにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "許可していない場所のファイルにアクセスされる可能性があります。", "product": "Memphis Documents Library", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 8.7, "cvssVersion": "4.0", "cvssSource": "disclosure@vulncheck.com", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "affected": [ { "product": "Memphis Documents Library", "range": ">= 2.2.1 / < 3.1.6" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-20100", "label": "NVDの原文" }, { "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/wp-memphis-documents-library-lfi.yaml", "label": "disclosure@vulncheck.com" }, { "url": "https://packetstorm.news/files/id/136374/", "label": "disclosure@vulncheck.com" }, { "url": "https://wordpress.org/plugins/memphis-documents-library/", "label": "disclosure@vulncheck.com" }, { "url": "https://wpscan.com/vulnerability/53999c06-05ca-44f1-b713-1e4d6b4a3f9f", "label": "disclosure@vulncheck.com" }, { "url": "https://www.exploit-db.com/exploits/39593", "label": "disclosure@vulncheck.com" }, { "url": "https://www.vulncheck.com/advisories/memphis-documents-library-wordpress-plugin-3.1.6-path-traversal-via-mdocs-img-preview", "label": "disclosure@vulncheck.com" } ], "publishedAt": "2026-10-20T21:17:13.520Z", "modifiedAt": "2026-10-22T17:40:46.877Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the mdocs-img-preview parameter. Attackers can send GET requests with traversal sequences to mdocs_img_preview() in mdocs-downloads.php to download wp-config.php containing database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-22.", "sourceTitle": "CVE-2016-20100", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Ian Howatson", "product": "Memphis Documents Library", "defaultStatus": "unaffected", "versions": [ { "version": "2.2.1", "lessThan": "3.1.6", "versionType": "custom", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-22T17:40:46.877Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2015-20125", "aliases": [], "title": "Aspose PDF Exporter：ファイルへの不正アクセス", "summary": "Aspose PDF Exporterにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "許可していない場所のファイルにアクセスされる可能性があります。", "product": "Aspose PDF Exporter", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 8.7, "cvssVersion": "4.0", "cvssSource": "disclosure@vulncheck.com", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "affected": [ { "product": "Aspose PDF Exporter", "range": ">= 1.0 / < 2.0" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-20125", "label": "NVDの原文" }, { "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/aspose-pdf-file-download.yaml", "label": "disclosure@vulncheck.com" }, { "url": "https://packetstorm.news/files/id/131161/", "label": "disclosure@vulncheck.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/1127209/aspose-pdf-exporter", "label": "disclosure@vulncheck.com" }, { "url": "https://wordpress.org/plugins/aspose-pdf-exporter/", "label": "disclosure@vulncheck.com" }, { "url": "https://wpscan.com/vulnerability/51dd0b6b-ba90-47e2-ad80-56b3e122bfd4", "label": "disclosure@vulncheck.com" }, { "url": "https://www.vulncheck.com/advisories/aspose-pdf-exporter-wordpress-plugin-2.0-path-traversal-via-aspose-pdf-exporter-download-php", "label": "disclosure@vulncheck.com" } ], "publishedAt": "2026-10-20T21:17:13.210Z", "modifiedAt": "2026-10-22T17:40:46.877Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the unsanitized 'file' parameter passed to readfile(). Attackers can send GET requests to aspose_pdf_exporter_download.php with traversal sequences like ../../../wp-config.php to retrieve WordPress database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.", "sourceTitle": "CVE-2015-20125", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Aspose", "product": "Aspose PDF Exporter", "defaultStatus": "unaffected", "versions": [ { "version": "1.0", "lessThan": "2.0", "versionType": "custom", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-22T17:40:46.877Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2015-20124", "aliases": [], "title": "Aspose Importer & Exporter：ファイルへの不正アクセス", "summary": "Aspose Importer & Exporterにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "許可していない場所のファイルにアクセスされる可能性があります。", "product": "Aspose Importer & Exporter", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 8.7, "cvssVersion": "4.0", "cvssSource": "disclosure@vulncheck.com", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "affected": [ { "product": "Aspose Importer & Exporter", "range": ">= 1.0 / < 3.0" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-20124", "label": "NVDの原文" }, { "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/aspose-ie-file-download.yaml", "label": "disclosure@vulncheck.com" }, { "url": "https://packetstorm.news/files/id/131162/", "label": "disclosure@vulncheck.com" }, { "url": "https://wordpress.org/plugins/aspose-importer-exporter/", "label": "disclosure@vulncheck.com" }, { "url": "https://www.vulncheck.com/advisories/aspose-importer-exporter-wordpress-plugin-3.0-path-traversal-via-aspose-import-export-download-php", "label": "disclosure@vulncheck.com" } ], "publishedAt": "2026-10-20T21:17:13.060Z", "modifiedAt": "2026-10-22T17:40:46.877Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the unsanitized 'file' parameter. Attackers can send GET requests to aspose_import_export_download.php with traversal sequences like ../../../wp-config.php to read database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.", "sourceTitle": "CVE-2015-20124", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Aspose", "product": "Aspose Importer & Exporter", "defaultStatus": "unaffected", "versions": [ { "version": "1.0", "lessThan": "3.0", "versionType": "custom", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-22T17:40:46.877Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2015-20123", "aliases": [], "title": "Aspose Doc Exporter：ファイルへの不正アクセス", "summary": "Aspose Doc Exporterにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "許可していない場所のファイルにアクセスされる可能性があります。", "product": "Aspose Doc Exporter", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 8.7, "cvssVersion": "4.0", "cvssSource": "disclosure@vulncheck.com", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "affected": [ { "product": "Aspose Doc Exporter", "range": ">= 1.0 / < 2.0" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-20123", "label": "NVDの原文" }, { "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/aspose-words-file-download.yaml", "label": "disclosure@vulncheck.com" }, { "url": "https://packetstorm.news/files/id/131167/", "label": "disclosure@vulncheck.com" }, { "url": "https://wordpress.org/plugins/aspose-doc-exporter/", "label": "disclosure@vulncheck.com" }, { "url": "https://wpscan.com/vulnerability/043aa583-a81d-4565-bf65-83252b8f1f96", "label": "disclosure@vulncheck.com" }, { "url": "https://www.exploit-db.com/exploits/36559", "label": "disclosure@vulncheck.com" }, { "url": "https://www.vulncheck.com/advisories/aspose-doc-exporter-wordpress-plugin-2.0-path-traversal-via-aspose-doc-exporter-download-php", "label": "disclosure@vulncheck.com" } ], "publishedAt": "2026-10-20T21:17:12.890Z", "modifiedAt": "2026-10-22T17:40:46.877Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by passing unsanitized paths to readfile(). Attackers can send GET requests to aspose_doc_exporter_download.php with the 'file' parameter set to values like ../../../wp-config.php to retrieve database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-23.", "sourceTitle": "CVE-2015-20123", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Aspose", "product": "Aspose Doc Exporter", "defaultStatus": "unaffected", "versions": [ { "version": "1.0", "lessThan": "2.0", "versionType": "custom", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-22T17:40:46.877Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2014-125134", "aliases": [], "title": "ChurcHope：ファイルへの不正アクセス", "summary": "ChurcHopeにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "許可していない場所のファイルにアクセスされる可能性があります。", "product": "ChurcHope", "category": "wordpress", "component": "theme", "severity": "high", "cvss": 8.7, "cvssVersion": "4.0", "cvssSource": "disclosure@vulncheck.com", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "affected": [ { "product": "ChurcHope", "range": "< 2.2" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-125134", "label": "NVDの原文" }, { "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/churchope-lfi.yaml", "label": "disclosure@vulncheck.com" }, { "url": "https://packetstorm.news/files/id/129706/", "label": "disclosure@vulncheck.com" }, { "url": "https://web.archive.org/web/20220629224817/https://www.cloudways.com/en/best-wordpress-themes/nonprofit/church", "label": "disclosure@vulncheck.com" }, { "url": "https://wpscan.com/vulnerability/3c5833bd-1fe0-4eba-97aa-7d3a0c8fda15", "label": "disclosure@vulncheck.com" }, { "url": "https://www.vulncheck.com/advisories/churchope-wordpress-theme-2.2-path-traversal-via-downloadlink-php", "label": "disclosure@vulncheck.com" } ], "publishedAt": "2026-10-20T21:17:12.720Z", "modifiedAt": "2026-10-22T17:40:46.877Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the 'file' parameter of /wp-content/themes/churchope/lib/downloadlink.php. Attackers can supply directory traversal sequences to read sensitive files like wp-config.php or /etc/passwd, exposing database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-18.", "sourceTitle": "CVE-2014-125134", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "ChurcHope", "product": "ChurcHope", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThan": "2.2", "versionType": "custom", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-22T17:40:46.877Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2014-125133", "aliases": [], "title": "NativeChurch：ファイルへの不正アクセス", "summary": "NativeChurchにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "許可していない場所のファイルにアクセスされる可能性があります。", "product": "NativeChurch", "category": "wordpress", "component": "theme", "severity": "high", "cvss": 8.7, "cvssVersion": "4.0", "cvssSource": "disclosure@vulncheck.com", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "affected": [ { "product": "NativeChurch", "range": "< 1.6.2" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-125133", "label": "NVDの原文" }, { "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/nativechurch-wp-theme-lfd.yaml", "label": "disclosure@vulncheck.com" }, { "url": "https://imithemes.com/item/native-church/", "label": "disclosure@vulncheck.com" }, { "url": "https://packetstorm.news/files/id/128101/", "label": "disclosure@vulncheck.com" }, { "url": "https://packetstorm.news/files/id/132297/", "label": "disclosure@vulncheck.com" }, { "url": "https://wpscan.com/vulnerability/2e1062ed-0c48-473f-aab2-20ac9d4c72b1", "label": "disclosure@vulncheck.com" }, { "url": "https://www.vulncheck.com/advisories/nativechurch-wordpress-theme-1.6.2-arbitrary-file-download-via-download-php", "label": "disclosure@vulncheck.com" } ], "publishedAt": "2026-10-20T21:17:12.560Z", "modifiedAt": "2026-10-22T16:53:20.563Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve sensitive files like wp-config.php. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.", "sourceTitle": "CVE-2014-125133", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "imithemes", "product": "NativeChurch", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThan": "1.6.2", "versionType": "custom", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-22T16:53:20.563Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2014-125132", "aliases": [], "title": "Blogroll Fun：ブラウザー上での不正な処理", "summary": "Blogroll Funにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "Blogroll Fun", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 5.1, "cvssVersion": "4.0", "cvssSource": "disclosure@vulncheck.com", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "affected": [ { "product": "Blogroll Fun", "range": "< 0.8.5" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-125132", "label": "NVDの原文" }, { "url": "https://codevigilant.com/disclosure/wp-plugin-blogroll-fun-a3-cross-site-scripting-xss/", "label": "disclosure@vulncheck.com" }, { "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/wp-blogroll-fun-xss.yaml", "label": "disclosure@vulncheck.com" }, { "url": "https://wordpress.org/plugins/blogroll-fun/", "label": "disclosure@vulncheck.com" }, { "url": "https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-blogroll-fun-show-last-post-and-last-update-time-cross-site-scripting-0-8-4/", "label": "disclosure@vulncheck.com" }, { "url": "https://www.vulncheck.com/advisories/blogroll-fun-wordpress-plugin-0.8.5-reflected-xss-via-blogroll-php", "label": "disclosure@vulncheck.com" } ], "publishedAt": "2026-10-20T21:17:12.403Z", "modifiedAt": "2026-10-22T16:53:20.563Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' parameter in blogroll.php. Attackers can craft GET requests to /wp-content/plugins/blogroll-fun/blogroll.php with malicious 'k' values that are echoed unsanitized, executing JavaScript in victims' browsers. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.", "sourceTitle": "CVE-2014-125132", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Jason Newman", "product": "Blogroll Fun", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThan": "0.8.5", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-22T16:53:20.563Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2012-20005", "aliases": [], "title": "SocialFit：ブラウザー上での不正な処理", "summary": "SocialFitにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "SocialFit", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 5.1, "cvssVersion": "4.0", "cvssSource": "disclosure@vulncheck.com", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "affected": [ { "product": "SocialFit", "range": "<= 1.2.2" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-20005", "label": "NVDの原文" }, { "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/wp-socialfit-xss.yaml", "label": "disclosure@vulncheck.com" }, { "url": "https://wordpress.org/plugins/socialfit/", "label": "disclosure@vulncheck.com" }, { "url": "https://www.exploit-db.com/exploits/37481", "label": "disclosure@vulncheck.com" }, { "url": "https://www.vulncheck.com/advisories/socialfit-wordpress-plugin-1.2.2-reflected-xss-via-popup-php-msg-parameter", "label": "disclosure@vulncheck.com" } ], "publishedAt": "2026-10-20T21:17:12.077Z", "modifiedAt": "2026-10-22T16:53:20.563Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and malicious msg values to execute script and steal session cookies. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.", "sourceTitle": "CVE-2012-20005", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Łukasz Więcek", "product": "SocialFit", "defaultStatus": "unknown", "versions": [ { "version": "0", "lessThanOrEqual": "1.2.2", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-22T16:53:20.563Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2012-20004", "aliases": [], "title": "K-news：ブラウザー上での不正な処理", "summary": "K-newsにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "K-news", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 5.1, "cvssVersion": "4.0", "cvssSource": "disclosure@vulncheck.com", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "affected": [ { "product": "K-news", "range": "< 1.1.1" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-20004", "label": "NVDの原文" }, { "url": "http://web.archive.org/web/20210213220043/https://www.securityfocus.com/bid/54330/info", "label": "disclosure@vulncheck.com" }, { "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/wp-knews-xss.yaml", "label": "disclosure@vulncheck.com" }, { "url": "https://wordpress.org/plugins/knews/", "label": "disclosure@vulncheck.com" }, { "url": "https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-knews-multilingual-newsletters-ff-parameter-cross-site-scripting-1-1-0", "label": "disclosure@vulncheck.com" }, { "url": "https://www.exploit-db.com/exploits/37484", "label": "disclosure@vulncheck.com" }, { "url": "https://www.vulncheck.com/advisories/k-news-wordpress-plugin-1.1.1-reflected-xss-via-fontpicker-index-php-ff-parameter", "label": "disclosure@vulncheck.com" } ], "publishedAt": "2026-10-20T21:17:11.907Z", "modifiedAt": "2026-10-22T16:53:20.563Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input through the 'ff' parameter. Attackers can craft GET requests to /wp-content/plugins/knews/wysiwyg/fontpicker/index.php with malicious 'ff' values echoed into option tags to execute script and steal session cookies. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.", "sourceTitle": "CVE-2012-20004", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Carles Reverter", "product": "K-news", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThan": "1.1.1", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-22T16:53:20.563Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2012-20003", "aliases": [], "title": "Custom Tables：ブラウザー上での不正な処理", "summary": "Custom Tablesにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "Custom Tables", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 5.1, "cvssVersion": "4.0", "cvssSource": "disclosure@vulncheck.com", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "affected": [ { "product": "Custom Tables", "range": "< 3.4.6" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-20003", "label": "NVDの原文" }, { "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/wp-custom-tables-xss.yaml", "label": "disclosure@vulncheck.com" }, { "url": "https://wordpress.org/plugins/custom-tables/", "label": "disclosure@vulncheck.com" }, { "url": "https://wpscan.com/vulnerability/211a4286-4747-4b62-acc3-fd9a57b06252", "label": "disclosure@vulncheck.com" }, { "url": "https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-custom-tables-key-parameter-cross-site-scripting-3-4-4/", "label": "disclosure@vulncheck.com" }, { "url": "https://www.exploit-db.com/exploits/37482", "label": "disclosure@vulncheck.com" }, { "url": "https://www.vulncheck.com/advisories/custom-tables-wordpress-plugin-3.4.6-reflected-xss-via-iframe-php", "label": "disclosure@vulncheck.com" } ], "publishedAt": "2026-10-20T21:17:11.730Z", "modifiedAt": "2026-10-22T16:53:20.563Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsanitized 'key' parameter in iframe.php. Attackers can craft GET requests to /wp-content/plugins/custom-tables/iframe.php with s=1 and a malicious key value to execute script in victims' browsers and steal cookies. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.", "sourceTitle": "CVE-2012-20003", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Web Updates KMU", "product": "Custom Tables", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThan": "3.4.6", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-22T16:53:20.563Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2012-20002", "aliases": [], "title": "TinyMCE Thumbnail Gallery：ファイルへの不正アクセス", "summary": "TinyMCE Thumbnail Galleryにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "許可していない場所のファイルにアクセスされる可能性があります。", "product": "TinyMCE Thumbnail Gallery", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 8.7, "cvssVersion": "4.0", "cvssSource": "disclosure@vulncheck.com", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "affected": [ { "product": "TinyMCE Thumbnail Gallery", "range": ">= 0.10 / < 1.1.0" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-20002", "label": "NVDの原文" }, { "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/wp-tinymce-lfi.yaml", "label": "disclosure@vulncheck.com" }, { "url": "https://packetstorm.news/files/id/113417/", "label": "disclosure@vulncheck.com" }, { "url": "https://wordpress.org/plugins/tinymce-thumbnail-gallery/", "label": "disclosure@vulncheck.com" }, { "url": "https://wpscan.com/vulnerability/4a49b023-c1c9-4cc4-a2fd-af5f911bb400", "label": "disclosure@vulncheck.com" }, { "url": "https://www.exploit-db.com/exploits/19022", "label": "disclosure@vulncheck.com" }, { "url": "https://www.vulncheck.com/advisories/tinymce-thumbnail-gallery-wordpress-plugin-1.1.0-path-traversal-via-download-image-php", "label": "disclosure@vulncheck.com" } ], "publishedAt": "2026-10-20T21:17:10.613Z", "modifiedAt": "2026-10-22T16:53:20.563Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the href parameter. Attackers can send GET requests to /php/download-image.php with traversal sequences like ../../../../wp-config.php to retrieve database credentials and system files. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.", "sourceTitle": "CVE-2012-20002", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "James Charlesworth", "product": "TinyMCE Thumbnail Gallery", "defaultStatus": "unaffected", "versions": [ { "version": "0.10", "lessThan": "1.1.0", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-22T16:53:20.563Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-109700", "aliases": [], "title": "Meta Box – WordPress Custom Fields Framework：脆弱性情報", "summary": "Meta Box – WordPress Custom Fields Frameworkに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Meta Box – WordPress Custom Fields Framework", "category": "wordpress", "component": "unknown", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "audit@patchstack.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "Meta Box – WordPress Custom Fields Framework", "range": "<= 5.15.2 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 5.15.3から影響なし。版の順序・条件は原文確認）" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109700", "label": "NVDの原文" }, { "url": "https://patchstack.com/database/wordpress/plugin/meta-box/vulnerability/wordpress-meta-box-wordpress-custom-fields-framework-plugin-5-15-2-broken-access-control-vulnerability?_s_id=cve", "label": "audit@patchstack.com" } ], "publishedAt": "2026-10-20T16:17:00.150Z", "modifiedAt": "2026-10-20T19:27:34.430Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.15.2.", "sourceTitle": "CVE-2026-109700", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "eLightUp", "product": "Meta Box – WordPress Custom Fields Framework", "defaultStatus": "unaffected", "collectionURL": "https://wordpress.org/plugins", "packageName": "meta-box", "versions": [ { "version": "0", "lessThanOrEqual": "5.15.2", "versionType": "custom", "status": "affected", "changes": [ { "at": "5.15.3", "status": "unaffected" } ] } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-20T19:27:34.430Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-93878", "aliases": [], "title": "DiviGear Carousel：ブラウザー上での不正な処理", "summary": "DiviGear Carouselにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "DiviGear Carousel", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.4, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "DiviGear Carousel", "range": "<= 5.2.0" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93878", "label": "NVDの原文" }, { "url": "https://www.divigear.com/", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f482cda1-fe38-455a-b913-bebb21b7bda4?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-20T07:17:09.947Z", "modifiedAt": "2026-10-20T19:27:34.430Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via update_license AJAX Action in all versions up to, and including, 5.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload executes when an administrator visits the DiviGear > Activation settings page, where the unsanitized stored value is echoed unescaped into a single-quoted HTML value attribute.", "sourceTitle": "CVE-2026-93878", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Divigear", "product": "DiviGear Carousel", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "5.2.0", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-20T19:27:34.430Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ] } ], "total": 2160, "limit": 20, "offset": 80, "filters": { "product": "all", "type": "all", "q": "", "page": 5 }, "pagination": { "page": 5, "pageSize": 20, "totalPages": 108 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-22T22:18:00.744Z", "lastAttempt": "2026-10-22T22:18:00.744Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "ok", "lastSuccess": "2026-10-22T22:18:00.744Z", "lastAttempt": "2026-10-22T22:18:00.744Z", "error": null, "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-22T22:18:00.744Z", "lastAttempt": "2026-10-22T22:18:00.744Z", "error": null, "recordCount": 1754, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "ok", "lastSuccess": "2026-10-22T22:18:00.744Z", "lastAttempt": "2026-10-22T22:18:00.744Z", "error": null, "recordCount": 11, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-22T21:17:13.942Z 〜 2026-10-22T22:18:00.744Z、全製品の変更 373/373件まで確認、対象11件反映。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-22T22:18:00.744Z", "lastAttempt": "2026-10-22T22:18:00.744Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。", "cursor": null, "freshness": "fresh", "stale": false } ] }