{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2026-107752", "aliases": [], "title": "Welcart e-Commerce：データベースへの不正操作", "summary": "Welcart e-Commerceにデータベースへの不正操作に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "データベースに不正な命令を送られ、情報の閲覧や変更につながる可能性があります。", "product": "Welcart e-Commerce", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 4.9, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "Welcart e-Commerce", "range": "<= 2.12.4" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107752", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/usc-e-shop/tags/2.12.4/classes/orderList.class.php#L256", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/usc-e-shop/tags/2.12.4/classes/orderList.class.php#L473", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/usc-e-shop/tags/2.12.4/classes/orderList.class.php#L613", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/usc-e-shop/tags/2.12.4/classes/orderList.class.php#L622", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/usc-e-shop/tags/2.12.4/classes/orderList.class.php#L776", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3743211/usc-e-shop", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3743211/usc-e-shop/trunk/classes/orderList.class.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0e78b5db-3f38-4ed7-9bec-6dd55d44f04f?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T04:16:48.260Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Welcart e-Commerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wp_usces_order_old (JSON fields searchSql / searchSkuSql)' parameter in all versions up to, and including, 2.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with editor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.", "sourceTitle": "CVE-2026-107752", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "uscnanbu", "product": "Welcart e-Commerce", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "2.12.4", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-107744", "aliases": [], "title": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses：脆弱性情報", "summary": "LearnPress – WordPress LMS Plugin for Create and Sell Online Coursesに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses", "range": "<= 4.4.10" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107744", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.9.1/inc/admin/class-lp-admin-ajax.php#L105", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.9.1/inc/admin/class-lp-admin-ajax.php#L80", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.9.1/inc/class-lp-request-handler.php#L173", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3750011/learnpress/trunk/inc/admin/class-lp-admin-ajax.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d1894596-b430-41b3-9d28-12c7dea7ff9b?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T04:16:48.113Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to enumerate the complete site user roster and extract the full email address of any WordPress account, including administrator accounts, character-by-character by using the search response as an oracle against both user_login and user_email columns.", "sourceTitle": "CVE-2026-107744", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "thimpress", "product": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "4.4.10", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-104736", "aliases": [], "title": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses：脆弱性情報", "summary": "LearnPress – WordPress LMS Plugin for Create and Sell Online Coursesに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses", "category": "wordpress", "component": "plugin", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses", "range": "<= 4.4.10" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104736", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.9.1/inc/class-lp-ajax.php#L21", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.9.1/inc/class-lp-checkout.php#L377", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.9.1/inc/class-lp-checkout.php#L523", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.9.1/inc/class-lp-session-handler.php#L373", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&old=3750024%40learnpress&new=3750024%40learnpress", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3e28e008-0ec1-4262-9ac0-6170cf8b8bdf?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T04:16:47.780Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted input from the 'checkout-email' request parameter during the checkout AJAX action. The value is passed through sanitize_text_field(), which does not strip serialized object syntax, then stored in the LearnPress session table and later fed to LP_Helper::maybe_unserialize() → unserialize() (without an allowed_classes restriction) by LP_Session_Handler::get() on subsequent requests. This makes it possible for unauthenticated attackers to inject a PHP Object.", "sourceTitle": "CVE-2026-104736", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "thimpress", "product": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "4.4.10", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-103899", "aliases": [], "title": "EU VAT Assistant for WooCommerce：権限の奪取", "summary": "EU VAT Assistant for WooCommerceに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "EU VAT Assistant for WooCommerce", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "EU VAT Assistant for WooCommerce", "range": "<= 2.1.30.260413" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-103899", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/woocommerce-eu-vat-assistant/tags/2.1.30.260413/src/lib/classes/integration/admin/orders_integration.php#L238", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/woocommerce-eu-vat-assistant/tags/2.1.30.260413/src/lib/classes/integration/vat_number_validation/validators/vat_number_validator.php#L132", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/woocommerce-eu-vat-assistant/tags/2.1.30.260413/src/lib/classes/order/order.php#L56", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/woocommerce-eu-vat-assistant/tags/2.1.30.260413/src/plugin-main.php#L1655", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/woocommerce-eu-vat-assistant/tags/2.1.30.260413/src/plugin-main.php#L901", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/woocommerce-eu-vat-assistant/tags/2.1.30.260413/src/views/admin/order-vat-info-box.php#L173", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e2cd7c07-e119-4064-a7a9-08c81409f90a?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T04:16:47.413Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vat_number' parameter in all versions up to, and including, 2.1.30.260413 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The stored payload executes in the administrator's browser context when reviewing an order via WooCommerce → Orders → Edit Order, enabling privilege escalation up to and including full site takeover via rogue administrator account creation.", "sourceTitle": "CVE-2026-103899", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "daigo75", "product": "EU VAT Assistant for WooCommerce", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "2.1.30.260413", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-111602", "aliases": [], "title": "Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress：情報の漏えい", "summary": "Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPressに情報の漏えいに関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来公開しない情報を読み取られる可能性があります。", "product": "Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress", "category": "wordpress", "component": "plugin", "severity": "low", "cvss": 3.7, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "affected": [ { "product": "Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress", "range": "<= 5.7.4" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111602", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/controllers/steps_controller.php#L355", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/helpers/params_helper.php#L14", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/helpers/steps_helper.php#L1175", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/models/model.php#L379", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.5/lib/controllers/steps_controller.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/6afce24f-30cd-4aeb-a5dd-20bd80a75779?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T03:16:28.740Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.7.4 via the 'params (customer[uuid])' parameter. This makes it possible for unauthenticated attackers to extract the first name, last name, email address, phone number, and notes of every customer record in the database by enumerating uuid prefixes via the unauthenticated steps__load_step AJAX endpoint. This vulnerability is only exploitable when the LatePoint plugin is configured with the 'Field used for authentication' setting set to 'Disable ability to login' (guest checkout mode).", "sourceTitle": "CVE-2026-111602", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "latepoint", "product": "Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "5.7.4", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-111601", "aliases": [], "title": "Hippoo Mobile App for WooCommerce：ブラウザー上での不正な処理", "summary": "Hippoo Mobile App for WooCommerceにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "Hippoo Mobile App for WooCommerce", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.1, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "affected": [ { "product": "Hippoo Mobile App for WooCommerce", "range": "<= 1.12.0" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111601", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/hippoo/tags/1.12.0/app/rest.php#L189", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/hippoo/tags/1.12.0/app/rest.php#L422", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/hippoo/tags/1.12.0/app/rest.php#L424", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3739429/hippoo/trunk/app/rest.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3c9c41af-0211-4a53-9ef4-b9392b2e9463?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T03:16:28.613Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'token_id' parameter in all versions up to, and including, 1.12.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. The URL path regex constrains the path segment to word characters, but WP_REST_Request's query-string parameter precedence allows a ?token_id= value to override it and reach the handler verbatim, bypassing the regex constraint entirely.", "sourceTitle": "CVE-2026-111601", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "hippooo", "product": "Hippoo Mobile App for WooCommerce", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "1.12.0", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-110653", "aliases": [], "title": "Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress：認証の回避", "summary": "Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPressに認証の回避に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "ログインなどの認証を回避され、不正な操作につながる可能性があります。", "product": "Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress", "category": "wordpress", "component": "plugin", "severity": "critical", "cvss": 9.1, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "affected": [ { "product": "Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress", "range": "<= 5.7.4" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110653", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/controllers/auth_controller.php#L14", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/controllers/auth_controller.php#L30", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/helpers/otp_helper.php#L185", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/helpers/otp_helper.php#L228", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/models/model.php#L773", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.5/lib/helpers/otp_helper.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/61fbc1dd-06c9-409b-8cad-3f350b38dfc3?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T03:16:28.480Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass via Race Condition in all versions up to, and including, 5.7.4. This is due to a non-atomic read-modify-write on the OTP verification attempts counter in the `verifyOTP` function: the counter is incremented using a stale in-memory value with no conditional `WHERE attempts < 10` guard on the `UPDATE` and no `SELECT ... FOR UPDATE` row lock, creating a TOCTOU window that allows concurrent requests to bypass the 10-attempt lockout. This makes it possible for unauthenticated attackers — who know a target customer's registered email address or phone number — to fire concurrent requests to the `auth__verify_otp` endpoint, defeat the lockout cap, brute-force the 6-digit OTP code, and authenticate as the targeted LatePoint customer, gaining full access to their account, bookings, and personal data. The nonce check present on the endpoint (`otp_verify_otp_nonce`) does not mitigate this issue, as the nonce is publicly emitted by the unauthenticated `request_otp` and `resend_otp` endpoints and is trivially obtainable by any unauthenticated attacker prior to launching the race.", "sourceTitle": "CVE-2026-110653", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "latepoint", "product": "Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "5.7.4", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-109208", "aliases": [], "title": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses：ブラウザー上での不正な処理", "summary": "LearnPress – WordPress LMS Plugin for Create and Sell Online Coursesにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses", "range": "<= 4.4.10" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109208", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.10/assets/src/js/admin/order/refund-order.js#L104", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.10/inc/admin/views/meta-boxes/order/content-tab-preview-exports-invoice.php#L86", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.10/inc/admin/views/meta-boxes/order/details.php#L218", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.10/inc/cart/class-lp-cart.php#L108", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.10/inc/class-lp-checkout.php#L390", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.10/inc/order/class-lp-order.php#L688", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.10/inc/rest-api/v1/frontend/class-lp-rest-courses-controller.php#L671", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&old=3750024%40learnpress&new=3750024%40learnpress", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4ac1ddf0-9164-45a8-b1dc-e684b1b4b447?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T03:16:28.340Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'quantity (REST) / order_comments (checkout)' parameter in all versions up to, and including, 4.4.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. With guest checkout enabled the attack is fully unauthenticated; with guest checkout disabled, any Subscriber-level user can exploit both vectors through their own checkout.", "sourceTitle": "CVE-2026-109208", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "thimpress", "product": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "4.4.10", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-107763", "aliases": [], "title": "Fastcache by Host.it：脆弱性情報", "summary": "Fastcache by Host.itに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Fastcache by Host.it", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 4.3, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "affected": [ { "product": "Fastcache by Host.it", "range": "<= 1.7.5" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107763", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/fastcache-by-host-it/tags/1.7.4/src/Admin.php#L304", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/fastcache-by-host-it/tags/1.7.4/src/Admin.php#L44", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/fastcache-by-host-it/tags/1.7.4/src/Core/Platform/Utility.php#L372", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&old=3737013%40fastcache-by-host-it&new=3737013%40fastcache-by-host-it", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1f0b4db0-2ccd-47e8-8f40-82e97726f815?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T03:16:28.213Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Fastcache by Host.it plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to add or remove the plugin's page-cache rewrite rules in the site's root .htaccess file.", "sourceTitle": "CVE-2026-107763", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "hostspa", "product": "Fastcache by Host.it", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "1.7.5", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-107762", "aliases": [], "title": "Kirki – Freeform Page Builder, Website Builder & Customizer：脆弱性情報", "summary": "Kirki – Freeform Page Builder, Website Builder & Customizerに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Kirki – Freeform Page Builder, Website Builder & Customizer", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.5, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "Kirki – Freeform Page Builder, Website Builder & Customizer", "range": "<= 6.3.2" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107762", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/kirki/tags/6.3.2/includes/API/Frontend/Controllers/CollectionController.php#L179", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/kirki/tags/6.3.2/includes/API/Frontend/Controllers/FrontendRESTController.php#L64", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/kirki/tags/6.3.2/includes/Frontend/Preview/Utils.php#L466", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/kirki/tags/6.3.2/includes/HelperFunctions.php#L1152", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3743904/kirki/trunk/includes/API/Frontend/Controllers/CollectionController.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1f2fd69f-d432-4eb2-9d28-cfd7dd100e82?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T03:16:28.083Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.3.2 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to expose arbitrary users' sensitive profile data — including email address, display name, nicename, registration date, profile image URL, and any string-valued user meta fields such as first name, last name, nickname, description, and custom meta keys — via the REST response. Exploitation requires a published page that uses a Kirki template containing at least one user-type dynamic content block; target user IDs are enumerable via standard WordPress REST endpoints, making the only prerequisite the presence of such a template on the site.", "sourceTitle": "CVE-2026-107762", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "themeum", "product": "Kirki – Freeform Page Builder, Website Builder & Customizer", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "6.3.2", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-104734", "aliases": [], "title": "Kirki – Freeform Page Builder, Website Builder & Customizer：脆弱性情報", "summary": "Kirki – Freeform Page Builder, Website Builder & Customizerに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Kirki – Freeform Page Builder, Website Builder & Customizer", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Kirki – Freeform Page Builder, Website Builder & Customizer", "range": "<= 6.3.2" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104734", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/kirki/tags/6.3.2/includes/Ajax.php#L802", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/kirki/tags/6.3.2/includes/Ajax/TemplateExportImport.php#L35", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/kirki/tags/6.3.2/includes/ExportImport/TemplateImport.php#L963", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/kirki/tags/6.3.2/includes/ExportImport/TemplateImport.php#L987", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset/3743904/kirki/trunk/includes/ExportImport/TemplateImport.php", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3c760235-ee53-4906-9e25-19df85b8f8ff?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-17T03:16:27.927Z", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.3.2 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. By default, Editor-level users are granted FULL_ACCESS to the plugin's import endpoint via the KIRKI_USERS_DEFAULT_FULL_ACCESS configuration, meaning exploitation is possible at Editor privilege level rather than being restricted to administrators alone.", "sourceTitle": "CVE-2026-104734", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "themeum", "product": "Kirki – Freeform Page Builder, Website Builder & Customizer", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "6.3.2", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-19T15:16:45.150Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-97470", "aliases": [], "title": "Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental：ブラウザー上での不正な処理", "summary": "Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rentalにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.4, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental", "range": "<= 3.0.1" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97470", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/tourfic/tags/2.23.5/inc/App/TF_Review.php#L154", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/tourfic/tags/2.23.5/inc/Classes/Helper.php#L38", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/tourfic/tags/2.23.5/inc/Traits/Action_Helper.php#L778", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/468451f8-699d-4bb9-9e34-f35a537ac522?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T14:19:27.763Z", "modifiedAt": "2026-10-16T15:17:38.140Z", "fetchedAt": "2026-10-22T22:09:50.314Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant to Customer Role in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires WooCommerce to be active, but since the customer role is freely self-registerable without admin approval, exploitation is effectively possible by any unauthenticated visitor who registers a WooCommerce account. While the plugin's own listing-page templates sanitize output with wp_kses_post(), the stored payload is returned unsanitized via the unauthenticated GET /wp-json/wp/v2/comments REST endpoint (content.rendered) and post/comment RSS feeds, exposing any headless client, feed reader, or third-party widget that renders comment content.", "sourceTitle": "CVE-2026-97470", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "themefic", "product": "Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "3.0.1", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:38.140Z", "fetchedAt": "2026-10-22T22:09:50.314Z", "state": "published" } ] }, { "id": "CVE-2026-110029", "aliases": [], "title": "Squeeze：脆弱性情報", "summary": "Squeezeに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Squeeze", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 5.4, "cvssVersion": "3.1", "cvssSource": "contact@wpscan.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "affected": [ { "product": "Squeeze", "range": "< 1.8.1" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110029", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/be39621f-99f3-489f-aa54-f96ca92e167a/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-16T12:16:32.387Z", "modifiedAt": "2026-10-16T15:17:09.340Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Squeeze WordPress plugin before 1.8.1 does not perform a capability check on one of its AJAX actions, allowing authenticated users with a role as low as Subscriber to revert any attachment to its backup copy and to permanently delete that backup and the plugin's generated WebP derivatives, regardless of ownership.", "sourceTitle": "CVE-2026-110029", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "Squeeze", "defaultStatus": "unaffected", "collectionURL": "https://wordpress.org/plugins", "versions": [ { "version": "0", "lessThan": "1.8.1", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:09.340Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-109930", "aliases": [], "title": "MAIO：脆弱性情報", "summary": "MAIOに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "MAIO", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 5.3, "cvssVersion": "3.1", "cvssSource": "contact@wpscan.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "affected": [ { "product": "MAIO", "range": "< 7.3.22" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109930", "label": "NVDの原文" }, { "url": "https://wpscan.com/vulnerability/45887eb3-93f9-4345-a72a-de627f23820c/", "label": "contact@wpscan.com" } ], "publishedAt": "2026-10-16T12:16:32.273Z", "modifiedAt": "2026-10-16T15:17:08.207Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The MAIO WordPress plugin before 7.3.22 does not properly restrict access to its analytics data, treating a credential value shipped verbatim in its own public source as a valid API key, which allows unauthenticated attackers to retrieve the stored crawl-analytics log, including each recorded visitor's IP address, user agent and referer.", "sourceTitle": "CVE-2026-109930", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "Unknown", "product": "MAIO", "defaultStatus": "unaffected", "collectionURL": "https://wordpress.org/plugins", "versions": [ { "version": "0", "lessThan": "7.3.22", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:08.207Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-107648", "aliases": [], "title": "WP Sessions Time Monitoring Full Automatic：ブラウザー上での不正な処理", "summary": "WP Sessions Time Monitoring Full Automaticにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "WP Sessions Time Monitoring Full Automatic", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "WP Sessions Time Monitoring Full Automatic", "range": "<= 1.1.5" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107648", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/activitytime/trunk/application/controllers/Actt_current_active.php#L104", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/activitytime/trunk/application/views/actt_current_active/index.php#L244", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/activitytime/trunk/includes/class-activitytime-tracker.php#L160", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/activitytime/trunk/includes/helper-functions.php#L340", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/activitytime/trunk/vendor/Winter_MVC/core/helpers.php#L1139", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/9edc25d5-10a0-4d5c-aa29-41fad5e29ae9?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T12:16:32.053Z", "modifiedAt": "2026-10-16T15:17:05.237Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The WP Sessions Time Monitoring Full Automatic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'action (also function, plugin, post_type, post_status, ids, loggedout, and POST post_title)' parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", "sourceTitle": "CVE-2026-107648", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "switcorp", "product": "WP Sessions Time Monitoring Full Automatic", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "1.1.5", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:05.237Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-96768", "aliases": [], "title": "GoSMTP Pro：ブラウザー上での不正な処理", "summary": "GoSMTP Proにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "GoSMTP Pro", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "GoSMTP Pro", "range": "<= 1.2.3" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96768", "label": "NVDの原文" }, { "url": "https://gosmtp.net/blog/gosmtp-1-2-4-launched/", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1e91e58d-a7b8-4d86-8c2d-9baaccb3e953?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T10:18:05.863Z", "modifiedAt": "2026-10-16T15:17:37.680Z", "fetchedAt": "2026-10-22T22:09:50.314Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The GoSMTP Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Email Log Body in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The exploit is made possible because WordPress comment kses does not strip entity-encoded tag delimiters, allowing the payload to pass moderation as safe text before being decoded into live HTML by core email notification functions and written verbatim into the plugin's email log database table.", "sourceTitle": "CVE-2026-96768", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "softaculous", "product": "GoSMTP Pro", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "1.2.3", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:37.680Z", "fetchedAt": "2026-10-22T22:09:50.314Z", "state": "published" } ] }, { "id": "CVE-2026-110703", "aliases": [], "title": "GeoDirectory – WP Business Directory Plugin and Classified Listings Directory：ブラウザー上での不正な処理", "summary": "GeoDirectory – WP Business Directory Plugin and Classified Listings Directoryにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "GeoDirectory – WP Business Directory Plugin and Classified Listings Directory", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.4, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "GeoDirectory – WP Business Directory Plugin and Classified Listings Directory", "range": "<= 2.8.191" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110703", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.191/includes/class-geodir-ajax.php#L821", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.191/includes/class-geodir-post-data.php#L1661", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.191/includes/post-functions.php#L2032", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.191/vendor/ayecode/wp-ayecode-ui/includes/inc/bs5-js.php#L328", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&old=3746728%40geodirectory&new=3746728%40geodirectory", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2af46137-6cdc-4898-8d59-3c603ebe02c4?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T10:18:05.447Z", "modifiedAt": "2026-10-16T14:51:17.720Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content' parameter in all versions up to, and including, 2.8.191 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires the attacker to own a published listing, as the ownership check in GeoDir_Post_Data::can_edit() limits who can store the payload; however, because ajax_save_post() re-applies the existing post_status, edits to an already-published listing bypass re-moderation and remain live immediately.", "sourceTitle": "CVE-2026-110703", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "paoltaia", "product": "GeoDirectory – WP Business Directory Plugin and Classified Listings Directory", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "2.8.191", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T14:51:17.720Z", "fetchedAt": "2026-10-22T22:09:30.689Z", "state": "published" } ] }, { "id": "CVE-2026-107649", "aliases": [], "title": "Events Made Easy：ブラウザー上での不正な処理", "summary": "Events Made Easyにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "Events Made Easy", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 5.4, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "Events Made Easy", "range": "<= 3.2.22" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107649", "label": "NVDの原文" }, { "url": "https://github.com/liedekef/events-made-easy/commit/3d9e92f98a9d9e443d65323ec8c86d598b3e34e0", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/events-made-easy/tags/3.2.21/includes/eme-fs.php#L831", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/events-made-easy/tags/3.2.21/includes/eme-fs.php#L867", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/events-made-easy/tags/3.2.21/includes/eme-locations.php#L3082", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/events-made-easy/tags/3.2.21/js/eme_show_maps.js#L208", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&new=3748824%40events-made-easy%2Ftags%2F3.2.23&old=3723758%40events-made-easy%2Ftags%2F3.2.21", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f80a1fa2-d44b-4101-a891-fce21ee99427?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T10:18:04.307Z", "modifiedAt": "2026-10-16T15:17:05.340Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'event[location_name]' parameter in all versions up to, and including, 3.2.22 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability is only exploitable when both the guest event submission feature (eme_fs[guest_submit]) and forced location creation (eme_fs[force_location_creation]) are explicitly enabled by a site administrator, as both settings default to off.", "sourceTitle": "CVE-2026-107649", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "liedekef", "product": "Events Made Easy", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "3.2.22", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:05.340Z", "fetchedAt": "2026-10-22T22:09:15.099Z", "state": "published" } ] }, { "id": "CVE-2026-93681", "aliases": [], "title": "Tutor LMS – eLearning and online course solution：ブラウザー上での不正な処理", "summary": "Tutor LMS – eLearning and online course solutionにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "product": "Tutor LMS – eLearning and online course solution", "category": "wordpress", "component": "plugin", "severity": "medium", "cvss": 6.4, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "Tutor LMS – eLearning and online course solution", "range": "<= 4.1.0" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93681", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.9/GDPR/Controllers/UserConsent.php#L113", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.9/assets/js/tutor-admin.js#L21", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.9/classes/Student.php#L208", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.9/classes/Student.php#L217", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&old=3730615%40tutor&new=3730615%40tutor", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3ff5cff8-ecca-4cde-b3f6-09ee49afea25?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T09:17:05.107Z", "modifiedAt": "2026-10-16T15:17:36.187Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via display_name Parameter in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that a Legal Consent record exists for the attacker's user account, causing the View Logs button to appear in the wp-admin/users.php Consent Logs column.", "sourceTitle": "CVE-2026-93681", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "themeum", "product": "Tutor LMS – eLearning and online course solution", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "4.1.0", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:36.187Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ] }, { "id": "CVE-2026-92766", "aliases": [], "title": "Vitepos – Point of Sale (POS) for WooCommerce：データベースへの不正操作", "summary": "Vitepos – Point of Sale (POS) for WooCommerceにデータベースへの不正操作に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "データベースに不正な命令を送られ、情報の閲覧や変更につながる可能性があります。", "product": "Vitepos – Point of Sale (POS) for WooCommerce", "category": "wordpress", "component": "plugin", "severity": "high", "cvss": 7.5, "cvssVersion": "3.1", "cvssSource": "security@wordfence.com", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "Vitepos – Point of Sale (POS) for WooCommerce", "range": "<= 3.5.1" } ], "fixed": [], "steps": [ "使っている製品名・バージョン・構成を、影響を受ける条件と照合してください。", "修正版や回避策は原文で確認してください。影響範囲の上限から修正版を推測しないでください。", "更新後は稼働中のバージョンと動作を確認してください。管理を委託している場合は、提供元に対応状況を確認してください。" ], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92766", "label": "NVDの原文" }, { "url": "https://plugins.trac.wordpress.org/browser/vitepos-lite/tags/3.5.1/vendor/appsbd-wp/appsbd-lite/appsbd_lite/v5/core/class-basemodel.php#L2877", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/vitepos-lite/tags/3.5.1/vendor/appsbd-wp/appsbd-lite/appsbd_lite/v5/core/class-basemodel.php#L741", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/vitepos-lite/tags/3.5.1/vendor/appsbd-wp/appsbd-lite/appsbd_lite/v5/core/class-querybuilder.php#L150", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/vitepos-lite/tags/3.5.1/vitepos_lite/api/v1/class-pos-vendor-api.php#L64", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/browser/vitepos-lite/tags/3.5.1/vitepos_lite/api/v1/class-pos-vendor-api.php#L79", "label": "security@wordfence.com" }, { "url": "https://plugins.trac.wordpress.org/changeset?reponame=&old=3700375%40vitepos-lite&new=3700375%40vitepos-lite", "label": "security@wordfence.com" }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7549e2f1-1ba9-4cd4-b2c2-6812d48e1590?source=cve", "label": "security@wordfence.com" } ], "publishedAt": "2026-10-16T09:17:04.963Z", "modifiedAt": "2026-10-16T15:17:35.763Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "exploitStatus": "unknown", "sources": [ "NVD" ], "originalText": "The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'src_by' parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This makes it possible for unauthenticated attackers, or authenticated attackers holding any POS role (such as vtpos-cashier), to exploit the vulnerability, as the /vitepos/v1/vendor/list REST route's permission callback requires only a POS role assignment rather than any elevated WordPress capability.", "sourceTitle": "CVE-2026-92766", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "affectedDetails": [ { "vendor": "appsbd", "product": "Vitepos – Point of Sale (POS) for WooCommerce", "defaultStatus": "unaffected", "versions": [ { "version": "0", "lessThanOrEqual": "3.5.1", "versionType": "semver", "status": "affected" } ] } ], "sourceSnapshots": [ { "source": "NVD", "modifiedAt": "2026-10-16T15:17:35.763Z", "fetchedAt": "2026-10-22T22:09:42.384Z", "state": "published" } ] } ], "total": 328, "limit": 20, "offset": 160, "filters": { "product": "wordpress", "type": "all", "q": "", "page": 9 }, "pagination": { "page": 9, "pageSize": 20, "totalPages": 17 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-23T00:17:50.236Z", "lastAttempt": "2026-10-23T00:17:50.236Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "error", "lastSuccess": "2026-10-22T22:18:00.744Z", "lastAttempt": "2026-10-23T00:17:50.236Z", "error": "GitHub API取得上限に到達 (2026-10-23T01:03:59.000Z以降に再取得)", "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-23T00:17:50.236Z", "lastAttempt": "2026-10-23T00:17:50.236Z", "error": null, "recordCount": 1754, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "ok", "lastSuccess": "2026-10-23T00:17:50.236Z", "lastAttempt": "2026-10-23T00:17:50.236Z", "error": null, "recordCount": 0, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-22T23:02:50.374Z 〜 2026-10-23T00:17:50.236Z、全製品の変更 93/93件まで確認、対象0件反映。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-23T00:17:50.236Z", "lastAttempt": "2026-10-23T00:17:50.236Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。 PHP公式ニュース経由で候補補足（先頭20項目から2件）。GitHub全件代替ではない。CVE取得は既存候補と合わせ最大6件。", "cursor": null, "freshness": "fresh", "stale": false } ] }