脆弱性アラート
利用者の多いプラグイン・テーマに脆弱性が公表されたとき、 何が起きるのかと、いま何をすべきかをまとめています。毎日更新しています。
掲載の基準は利用サイト数1万以上、または悪用される確率が高いと推定されるもの （EPSS 1%以上）、または実際の悪用が確認されたもの（CISA KEV 掲載）です。
- Tutor LMS – eLearning and online course solution — CVE-2026-16759
- One User Avatar | User Profile Picture — CVE-2026-18983
- LiteSpeed Cache — CVE-2026-18978
- LiteSpeed Cache — CVE-2026-3129
- Forminator Forms – Contact Form, Payment Form & Custom Form Builder — CVE-2026-18324
- TranslatePress – Translate Multilingual sites with AI Translation — CVE-2026-76053
- Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization — CVE-2026-77365
- Smart Slider 3 — CVE-2026-15798
- Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More — CVE-2026-3423
- GiveWP – Donation Plugin and Fundraising Platform — CVE-2026-5510
- Booking for Appointments and Events Calendar – Amelia — CVE-2026-6286
- Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI — CVE-2026-5096
- Customer Reviews for WooCommerce — CVE-2026-6176
- wpForo Forum — CVE-2026-5097
- Greenshift – animation and page builder blocks — CVE-2026-5092
- WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards — CVE-2026-3235
- Reviews and Rating – Google Reviews — CVE-2026-2388
- Gutenverse – WordPress Blocks, Page Builder & Site Editor — CVE-2026-3002
- Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More — CVE-2026-18331
- WP Fastest Cache – WordPress Cache Plugin — CVE-2026-19760
- TranslatePress – Translate Multilingual sites with AI Translation — CVE-2026-19632
- ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution — CVE-2026-75971
- All-in-One WP Migration and Backup — CVE-2026-19949
- Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin — CVE-2026-18547