NVD や CVE、ほか複数の脅威フィードを束ね、RCE など高リスクな事象を深く追える一覧です。CVSS と EPSS を組み合わせ、Exploit 参照や PoC の有無から悪用しやすさを追跡します。ベンダー修正や緩和策の文脈とあわせて優先度を決め、対応サイクルを短く保ちつつ重要資産を守る支援をします。
Assigner（CNA／発行元）：[email protected] この条件を外す
| CVE | 説明 | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|
| CVE-2026-49104 | Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.2.1 versions. | 9.8 | 0.38% | 2026-06-15 | 2026-06-15 |
| CVE-2026-49085 | Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.4 versions. | 9.8 | 0.38% | 2026-06-15 | 2026-06-15 |
| CVE-2026-49067 | Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions. | 9.3 | 0.30% | 2026-06-15 | 2026-06-15 |
| CVE-2026-48886 | Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions. | 9.3 | 0.28% | 2026-06-15 | 2026-06-15 |
| CVE-2026-48881 | Unauthenticated Broken Access Control in TrueBooker <= 1.1.9 versions. | 9.1 | 0.28% | 2026-06-15 | 2026-06-15 |
| CVE-2026-48836 | Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions. | 10.0 | 0.57% | 2026-06-15 | 2026-06-15 |
| CVE-2026-45439 | Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions. | 9.3 | 0.29% | 2026-06-15 | 2026-06-15 |
| CVE-2026-42665 | Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions. | 9.3 | 0.28% | 2026-06-15 | 2026-06-15 |
| CVE-2026-42639 | Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions. | 9.3 | 0.28% | 2026-06-15 | 2026-06-15 |
| CVE-2026-42386 | Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 versions. | 9.3 | 0.28% | 2026-06-15 | 2026-06-15 |
| CVE-2026-42381 | Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions. | 9.3 | 0.28% | 2026-06-15 | 2026-06-15 |
| CVE-2026-40798 | Unauthenticated SQL Injection in wpForo Forum <= 3.0.4 versions. | 9.3 | 0.28% | 2026-06-15 | 2026-06-15 |
| CVE-2026-40772 | Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions. | 10.0 | 0.35% | 2026-06-15 | 2026-06-15 |
| CVE-2026-40771 | Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions. | 9.3 | 0.28% | 2026-06-15 | 2026-06-15 |
| CVE-2026-39591 | Subscriber Arbitrary File Upload in WP-BusinessDirectory <= 4.0.0 versions. | 9.9 | 0.46% | 2026-06-15 | 2026-06-15 |
| CVE-2026-39583 | Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions. | 9.8 | 0.36% | 2026-06-15 | 2026-06-15 |
| CVE-2026-39530 | Unauthenticated SQL Injection in SpeakOut! Email Petitions <= 4.6.5 versions. | 9.3 | 0.30% | 2026-06-15 | 2026-06-15 |
| CVE-2026-39519 | Unauthenticated SQL Injection in GeekyBot <= 1.2.0 versions. | 9.3 | 0.28% | 2026-06-15 | 2026-06-15 |
| CVE-2026-39512 | Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions. | 9.3 | 0.28% | 2026-06-15 | 2026-06-15 |
| CVE-2026-39511 | Unauthenticated SQL Injection in WP Photo Album Plus <= 9.1.08.001 versions. | 9.3 | 0.29% | 2026-06-15 | 2026-06-15 |