{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2026-81344", "aliases": [], "title": "ACF Frontend Admin by DynamiApps：コード実行", "summary": "ACF Frontend Admin by DynamiAppsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "ACF Frontend Admin by DynamiApps", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.6, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "ACF Frontend Admin by DynamiApps", "range": "<= 3.29.13" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81344", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/4e6d6ade-d58c-40c1-9235-678dac0c0fa9/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-17T06:16:33.830Z", "modifiedAt": "2026-10-19T21:04:50.950Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP classes may be instantiated when it deserialises stored post content that is rendered on public-facing pages, allowing high-privilege users such as administrators to inject a PHP object which, given a suitable POP chain in another installed ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 or in WordPress core, can be leveraged to achieve remote code execution.", "sourceTitle": "CVE-2026-81344", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "ACF Frontend Admin by DynamiApps", "defaultStatus": "unknown", "versions": [ { "version": "0", "lessThanOrEqual": "3.29.13", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T21:04:50.950Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ] }, { "id": "CVE-2026-81343", "aliases": [], "title": "ACF Frontend Admin by DynamiApps：脆弱性情報", "summary": "ACF Frontend Admin by DynamiAppsに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "ACF Frontend Admin by DynamiApps", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 5.3, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "affected": [ { "product": "ACF Frontend Admin by DynamiApps", "range": "<= 3.29.13" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81343", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/1919eb80-195e-48ed-b58e-3cab4bb1d73d/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-17T06:16:33.710Z", "modifiedAt": "2026-10-19T21:04:50.950Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a capability check on one of its form-submission actions before writing submitted values into the site's global ACF options store, allowing unauthenticated visitors to overwrite site-wide option values via a public form.", "sourceTitle": "CVE-2026-81343", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "ACF Frontend Admin by DynamiApps", "defaultStatus": "unknown", "versions": [ { "version": "0", "lessThanOrEqual": "3.29.13", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T21:04:50.950Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ] }, { "id": "CVE-2026-110527", "aliases": [], "title": "WP User Manager：脆弱性情報", "summary": "WP User Managerに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "WP User Manager", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 5.3, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "affected": [ { "product": "WP User Manager", "range": ">= 2.9 / < 2.9.20" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110527", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/a9368969-cc1c-48b7-aa39-94a4d3c50669/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-17T06:16:33.580Z", "modifiedAt": "2026-10-19T21:04:50.950Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it creates during payment-gated registration when the subsequent payment step fails, allowing unauthenticated users to create functional accounts without completing payment.", "sourceTitle": "CVE-2026-110527", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "WP User Manager", "defaultStatus": "unaffected", "versions": [ { "version": "2.9", "lessThan": "2.9.20", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T21:04:50.950Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-106470", "aliases": [], "title": "WP Data Access：意図しない操作", "summary": "WP Data Accessに意図しない操作に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "ログイン中の利用者に、意図しない操作を実行させる可能性があります。", "product": "WP Data Access", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 5, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "affected": [ { "product": "WP Data Access", "range": "< 5.5.88" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-106470", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/ace39ccf-9fe4-4616-9155-818c10d685dc/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-17T06:16:33.450Z", "modifiedAt": "2026-10-19T21:02:51.987Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The WP Data Access WordPress plugin before 5.5.88 does not have authorisation and CSRF checks in one of its actions, allowing any authenticated user, such as a subscriber, to make the server open connections to arbitrary hosts and ports, including internal ones, and read back the outcome.", "sourceTitle": "CVE-2026-106470", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "WP Data Access", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThan": "5.5.88", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T21:02:51.987Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-104246", "aliases": [], "title": "Contact Form 7 Signature Addon：ファイルへの不正アクセス", "summary": "Contact Form 7 Signature Addonにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "許可していない場所のファイルにアクセスされる可能性があります。", "product": "Contact Form 7 Signature Addon", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 5.9, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "Contact Form 7 Signature Addon", "range": "<= 4.2.2" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104246", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/e56dc60b-9232-43f2-8d57-fe9452c85281/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-17T06:16:33.347Z", "modifiedAt": "2026-10-19T21:02:51.987Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Contact Form 7 Signature Addon WordPress plugin through 4.2.2 does not sanitize a signature field value before building an email attachment path from it, allowing unauthenticated users to attach arbitrary files (bounded to wp-content on current Contact Form 7) to a form's outgoing email via path traversal; when a form is configured to email a copy to a submitter-controlled address, the attacker can read the targeted file.", "sourceTitle": "CVE-2026-104246", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Contact Form 7 Signature Addon", "defaultStatus": "unknown", "versions": [ { "version": "0", "lessThanOrEqual": "4.2.2", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T21:02:51.987Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-104122", "aliases": [], "title": "Ukr-To-Lat：データベースへの不正操作", "summary": "Ukr-To-Latにデータベースへの不正操作に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "データベースに不正な命令を送られ、情報の閲覧や変更につながる可能性があります。", "product": "Ukr-To-Lat", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.8, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "affected": [ { "product": "Ukr-To-Lat", "range": "<= 1.3.5" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104122", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/01abcbf8-d256-49b9-b660-38c50506c441/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-17T06:16:33.237Z", "modifiedAt": "2026-10-19T21:02:51.987Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and escape a term name before using it in a SQL query, allowing users with Contributor-level access and above to perform SQL injection attacks.", "sourceTitle": "CVE-2026-104122", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Ukr-To-Lat", "defaultStatus": "unknown", "versions": [ { "version": "0", "lessThanOrEqual": "1.3.5", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T21:02:51.987Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-103376", "aliases": [], "title": "PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI)：脆弱性情報", "summary": "PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI)に脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI)", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 5.3, "cvssVersion": "3.1", "cvssSource": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "affected": [ { "product": "PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI)", "range": ">= 1.117.9 / < 1.120.70" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-103376", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/be66093b-2042-45a6-90cf-c45f105776c6/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-17T06:16:30.930Z", "modifiedAt": "2026-10-19T21:02:51.987Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) WordPress plugin before 1.120.70 does not perform any capability or ownership check before returning an order's secret key in response to an unauthenticated request, allowing anyone to retrieve the key for any paid order and use it to view that order's customer name, email address, postal address and contents.", "sourceTitle": "CVE-2026-103376", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI)", "defaultStatus": "unaffected", "versions": [ { "version": "1.117.9", "lessThan": "1.120.70", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T21:02:51.987Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-96660", "aliases": [], "title": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder：ブラウザー上での不正な処理", "summary": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builderにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder", "range": "<= 5.2.8" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96660", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/class-ur-ajax.php#L221", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/frontend/class-ur-frontend-form-handler.php#L519", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/functions-ur-core.php#L5606", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/functions-ur-template.php#L555", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3741339/user-registration/trunk/includes/frontend/class-ur-frontend-form-handler.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/690d23ee-cf70-4ecf-8cd2-21f673788d5f?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T04:17:10.537Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:50.314Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Checkbox Field Value in all versions up to, and including, 5.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The nopriv AJAX action user_registration_user_form_submit reaches ur_process_registration() without nonce validation, meaning any unauthenticated request can reach the vulnerable code path.", "sourceTitle": "CVE-2026-96660", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "wpeverest", "product": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "5.2.8", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:50.314Z", "state": "published" } ] }, { "id": "CVE-2026-92978", "aliases": [], "title": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder：意図しない操作", "summary": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builderに意図しない操作に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "ログイン中の利用者に、意図しない操作を実行させる可能性があります。", "product": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 4.3, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "affected": [ { "product": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder", "range": "<= 5.2.8" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92978", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/admin/class-ur-admin-user-list-manager.php#L140", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/admin/class-ur-admin-user-list-manager.php#L36", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/admin/class-ur-admin-user-list-manager.php#L667", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/admin/class-ur-admin-user-list-manager.php#L687", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3741339/user-registration/trunk/includes/admin/class-ur-admin-user-list-manager.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/713c4652-9ca0-41f7-9a93-8186d9b359e8?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T04:17:10.410Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.2.8 This is due to missing or incorrect nonce validation on the trigger_bulk_action function. This makes it possible for unauthenticated attackers to force administrators to approve pending user registrations or deny arbitrary user accounts, locking targeted users out of the site via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. An attacker can bypass the earlier nonce check in trigger_query_actions() by supplying an empty new_role parameter, which causes that handler to return early and cede control to the unprotected trigger_bulk_action() handler; the exit() call at the end of that handler additionally prevents WordPress core's own bulk-users nonce validation from executing.", "sourceTitle": "CVE-2026-92978", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "wpeverest", "product": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "5.2.8", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ] }, { "id": "CVE-2026-92798", "aliases": [], "title": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder：脆弱性情報", "summary": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builderに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 8.1, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "affected": [ { "product": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder", "range": "<= 5.2.8" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92798", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/class-ur-smart-tags.php#L474", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/class-ur-smart-tags.php#L475", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/modules/content-restriction/class-urcr-frontend.php#L1383", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/modules/content-restriction/functions-urcr-core.php#L693", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3741339/user-registration/trunk/includes/class-ur-smart-tags.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ec317df9-c7ef-49a3-9818-903dfe4bdd03?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T04:17:10.257Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The User Registration & Membership plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 5.2.8 This is due to insufficient input sanitization in the 'referrer_url' branch of UR_Smart_Tags::process(), where the attacker-controlled HTTP_REFERER header is only passed through sanitize_text_field() — which does not strip WordPress shortcode delimiters — before being substituted into a Content Restriction message that is subsequently executed via apply_shortcodes()/do_shortcode(). This makes it possible for unauthenticated attackers to execute arbitrary registered shortcodes on any restricted page whose message uses the supported {{referrer_url}} smart tag.", "sourceTitle": "CVE-2026-92798", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "wpeverest", "product": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "5.2.8", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ] }, { "id": "CVE-2026-92715", "aliases": [], "title": "Tutor LMS – eLearning and online course solution：脆弱性情報", "summary": "Tutor LMS – eLearning and online course solutionに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Tutor LMS – eLearning and online course solution", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 4.3, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "affected": [ { "product": "Tutor LMS – eLearning and online course solution", "range": "<= 4.1.0" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92715", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.8/classes/Course.php#L1009", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.8/classes/Course.php#L1053", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.8/classes/Course.php#L303", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.8/classes/Course.php#L850", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3730615/tutor/trunk/classes/Course.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/12f093bd-5230-4103-b571-80543c1b43cf?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T04:17:10.073Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the 'ID' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with author-level access and above, to modify arbitrary courses created by other instructors — overwriting their title, content, and status — and reassign ownership of those courses to themselves. This is possible because Input::sanitize_array() preserves attacker-supplied POST keys (including 'ID') without stripping them, and WordPress interprets a non-empty ID in the wp_insert_post() argument array as an update to the existing post rather than a new insert.", "sourceTitle": "CVE-2026-92715", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "themeum", "product": "Tutor LMS – eLearning and online course solution", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "4.1.0", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ] }, { "id": "CVE-2026-111726", "aliases": [], "title": "Themify Builder：ブラウザー上での不正な処理", "summary": "Themify Builderにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "Themify Builder", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.4, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "Themify Builder", "range": "<= 7.8.2" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111726", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/themify-builder/tags/7.8.2/modules/module-slider.php#L113", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/themify-builder/tags/7.8.2/templates/template-slider.php#L90", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&old=3749606%40themify-builder&new=3749606%40themify-builder", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c1d5bc13-585d-405d-b6f3-14db26464e55?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T04:16:52.233Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'visible' Shortcode Attribute in all versions up to, and including, 7.8.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability is only exploitable when the 'slider' custom post type is active, which is satisfied automatically when the plugin is paired with a Themify theme or any other plugin that registers the 'slider' CPT.", "sourceTitle": "CVE-2026-111726", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "themifyme", "product": "Themify Builder", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "7.8.2", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-110268", "aliases": [], "title": "Post Export Import with Media：ファイルへの不正アクセス", "summary": "Post Export Import with Mediaにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "許可していない場所のファイルにアクセスされる可能性があります。", "product": "Post Export Import with Media", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 4.9, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "Post Export Import with Media", "range": "<= 1.17.2" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110268", "label": "NVDの原文" }, { "url": "https://plugins.svn.wordpress.org/post-export-import-with-media/trunk/", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.1/includes/class-admin-download-buttons.php#L251", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.1/includes/class-admin-download-buttons.php#L258", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.1/includes/class-admin-download-buttons.php#L357", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.1/includes/class-admin-download-buttons.php#L360", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.2/includes/class-admin-download-buttons.php#L251", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.2/includes/class-admin-download-buttons.php#L258", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.2/includes/class-admin-download-buttons.php#L357", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.2/includes/class-admin-download-buttons.php#L360", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3749775/post-export-import-with-media/trunk/includes/class-admin-download-buttons.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/061b1f95-26da-4d1a-9e0a-6f83adf56d2e?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T04:16:52.057Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.2 via the 'theme_slug' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to perform actions on files outside of the originally intended directory. Exploitation requires the peiwm_enable_admin_download_buttons feature to be enabled in the plugin settings.", "sourceTitle": "CVE-2026-110268", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "wpazleen", "product": "Post Export Import with Media", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "1.17.2", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-109989", "aliases": [], "title": "Themify Popup：ブラウザー上での不正な処理", "summary": "Themify Popupにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "Themify Popup", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.4, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "Themify Popup", "range": "<= 1.4.7" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109989", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/themify-popup/tags/1.4.7/includes/themify-metabox/includes/themify-metabox-core.php#L151", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/themify-popup/tags/1.4.7/includes/themify-metabox/includes/themify-metabox-core.php#L209", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/themify-popup/tags/1.4.7/views/styles.php#L29", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&old=3749602%40themify-popup&new=3749602%40themify-popup", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/da003985-7fb2-4f5b-bb70-6ec3578ef3e8?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T04:16:51.907Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Themify Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'popup_width_unit' parameter in all versions up to, and including, 1.4.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", "sourceTitle": "CVE-2026-109989", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "themifyme", "product": "Themify Popup", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "1.4.7", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-109985", "aliases": [], "title": "xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN：ブラウザー上での不正な処理", "summary": "xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDNにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.4, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN", "range": "<= 1.4.2" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109985", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/xspeed/tags/1.4.2/includes/class-lazy-loader.php#L742", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/xspeed/tags/1.4.2/includes/class-lazy-loader.php#L879", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/xspeed/tags/1.4.2/includes/class-lazy-loader.php#L882", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/xspeed/tags/1.4.2/includes/modules/Lazy/LazyModule.php#L197", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&old=3749755%40xspeed&new=3749755%40xspeed", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0d2f534b-804e-4def-bcc6-7418ad7d1ffd?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T04:16:51.760Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", "sourceTitle": "CVE-2026-109985", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "wpdevteam", "product": "xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "1.4.2", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-109369", "aliases": [], "title": "WP Booking System – Booking Calendar：脆弱性情報", "summary": "WP Booking System – Booking Calendarに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "WP Booking System – Booking Calendar", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.8, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "affected": [ { "product": "WP Booking System – Booking Calendar", "range": "<= 2.1.0.3" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109369", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/base/admin/form/functions-actions-form.php#L97", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/base/admin/functions.php#L30", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/modules/user-restrictions/functions-restrictions-form.php#L56", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3750120/wp-booking-system/trunk/includes/modules/user-restrictions/functions-restrictions-form.php", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?old=3730163&old_path=%2Fwp-booking-system%2Ftrunk&new=&new_path=%2Fwp-booking-system%2Ftrunk", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/6d795763-1c26-4ad8-b4b5-d9c051f064fb?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T04:16:51.620Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0.3 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to grant themselves and arbitrary other users edit access to every booking form on the site by overwriting the user_permission meta that governs the plugin's own access-control list. Exploitation requires the attacker to have already been delegated edit rights on at least one booking form, as this delegation both downgrades the submenu capability to 'read' (making the edit page accessible) and allows them to harvest a valid wpbs_edit_form nonce that will pass validation against any other form_id.", "sourceTitle": "CVE-2026-109369", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "murgroland", "product": "WP Booking System – Booking Calendar", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "2.1.0.3", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-109368", "aliases": [], "title": "WP Booking System – Booking Calendar：情報の漏えい", "summary": "WP Booking System – Booking Calendarに情報の漏えいに関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来公開しない情報を読み取られる可能性があります。", "product": "WP Booking System – Booking Calendar", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "WP Booking System – Booking Calendar", "range": "<= 2.1.0.3" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109368", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/base/admin/calendar/class-calendar-editor-outputter.php#L432", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/base/admin/calendar/class-calendar-editor-outputter.php#L484", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/base/admin/calendar/functions-actions-ajax-calendar.php#L12", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/base/admin/calendar/functions-actions-ajax-calendar.php#L62", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3750120/wp-booking-system/trunk/includes/base/admin/calendar/functions-actions-ajax-calendar.php", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?old=3730163&old_path=%2Fwp-booking-system%2Ftrunk&new=&new_path=%2Fwp-booking-system%2Ftrunk", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/164a276a-612f-416f-b9ef-1c2e6dd0e8e4?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T04:16:51.480Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.0.3 via the 'id' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract private per-event booking descriptions and booking IDs from any calendar managed by the site.", "sourceTitle": "CVE-2026-109368", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "murgroland", "product": "WP Booking System – Booking Calendar", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "2.1.0.3", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-108123", "aliases": [], "title": "WP Booking System – Booking Calendar：脆弱性情報", "summary": "WP Booking System – Booking Calendarに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "WP Booking System – Booking Calendar", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.5, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "WP Booking System – Booking Calendar", "range": "<= 2.1.0.3" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108123", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/base/admin/booking/functions.php#L244", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/base/admin/booking/functions.php#L250", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/base/admin/functions.php#L30", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/wp-booking-system/trunk/includes/base/admin/booking/functions.php", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3750085/wp-booking-system/trunk/includes/base/admin/booking/functions.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a86fab4a-71ec-4006-96f0-46202de2f389?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T04:16:48.427Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0.3 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to read the stored notification email body of any booking by iterating booking_id and email_log_id, exposing customer PII including names, email addresses, phone numbers, messages, and booking dates intended to be visible only to administrators. This is exploitable by any Subscriber-level user because admin_init fires on profile.php, a wp-admin page accessible to all authenticated users.", "sourceTitle": "CVE-2026-108123", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "murgroland", "product": "WP Booking System – Booking Calendar", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "2.1.0.3", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-107752", "aliases": [], "title": "Welcart e-Commerce：データベースへの不正操作", "summary": "Welcart e-Commerceにデータベースへの不正操作に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "データベースに不正な命令を送られ、情報の閲覧や変更につながる可能性があります。", "product": "Welcart e-Commerce", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 4.9, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "Welcart e-Commerce", "range": "<= 2.12.4" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107752", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/usc-e-shop/tags/2.12.4/classes/orderList.class.php#L256", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/usc-e-shop/tags/2.12.4/classes/orderList.class.php#L473", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/usc-e-shop/tags/2.12.4/classes/orderList.class.php#L613", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/usc-e-shop/tags/2.12.4/classes/orderList.class.php#L622", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/usc-e-shop/tags/2.12.4/classes/orderList.class.php#L776", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3743211/usc-e-shop", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3743211/usc-e-shop/trunk/classes/orderList.class.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0e78b5db-3f38-4ed7-9bec-6dd55d44f04f?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T04:16:48.260Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Welcart e-Commerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wp_usces_order_old (JSON fields searchSql / searchSkuSql)' parameter in all versions up to, and including, 2.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with editor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.", "sourceTitle": "CVE-2026-107752", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "uscnanbu", "product": "Welcart e-Commerce", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "2.12.4", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-107744", "aliases": [], "title": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses：脆弱性情報", "summary": "LearnPress – WordPress LMS Plugin for Create and Sell Online Coursesに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses", "range": "<= 4.4.10" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107744", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.9.1/inc/admin/class-lp-admin-ajax.php#L105", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.9.1/inc/admin/class-lp-admin-ajax.php#L80", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.9.1/inc/class-lp-request-handler.php#L173", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3750011/learnpress/trunk/inc/admin/class-lp-admin-ajax.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d1894596-b430-41b3-9d28-12c7dea7ff9b?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T04:16:48.113Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to enumerate the complete site user roster and extract the full email address of any WordPress account, including administrator accounts, character-by-character by using the search response as an oracle against both user_login and user_email columns.", "sourceTitle": "CVE-2026-107744", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "thimpress", "product": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "4.4.10", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] } ], "total": 2160, "limit": 20, "offset": 160, "filters": { "product": "all", "type": "all", "q": "", "page": 9 }, "pagination": { "page": 9, "pageSize": 20, "totalPages": 108 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-23T01:17:50.760Z", "lastAttempt": "2026-10-23T01:17:50.760Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "error", "lastSuccess": "2026-10-22T22:18:00.744Z", "lastAttempt": "2026-10-23T01:17:50.760Z", "error": "GitHub API取得上限に到達 (2026-10-23T01:56:27.000Z以降に再取得)", "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "stale", "stale": true }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-23T01:17:50.760Z", "lastAttempt": "2026-10-23T01:17:50.760Z", "error": null, "recordCount": 1754, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "ok", "lastSuccess": "2026-10-23T01:17:50.760Z", "lastAttempt": "2026-10-23T01:17:50.760Z", "error": null, "recordCount": 0, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-23T00:02:50.236Z 〜 2026-10-23T01:17:50.760Z、全製品の変更 9/9件まで確認、対象0件反映。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-23T01:17:50.760Z", "lastAttempt": "2026-10-23T01:17:50.760Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。 PHP公式ニュース経由で候補補足（先頭20項目から2件）。GitHub全件代替ではない。CVE取得は既存候補と合わせ最大6件。", "cursor": null, "freshness": "fresh", "stale": false } ] }