Saltar al contenido

Radar en marcha

Bastion/Radar

[■] Gestor de contenidos

WordPress

Web oficial

43.917 expedientes en el radar

Comprueba tu versión de WordPress Sólo las que se están explotando

[■] Para hacerlo bien

Guías

[■] Registro

Vulnerabilidades (43.917)

  1. 7,5 Alta

    CVE-2026-97291: deserialización de datos no fiables en Schema & Structured Data for WP & AMP

    CVE-2026-97291

    T−46d 30 sept. 2026

  2. 7,5 Alta

    CVE-2026-102377: deserialización de datos no fiables en Photo Gallery by 10Web – Mobile-Friendly Image Gallery

    CVE-2026-102377

    T−46d 30 sept. 2026

  3. 4,3 Media

    CVE-2026-102375: falta de autorización en Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization

    CVE-2026-102375

    T−46d 30 sept. 2026

  4. 7,2 Alta

    CVE-2026-97265: cross-site scripting (XSS) en JetEngine

    CVE-2026-97265

    T−46d 30 sept. 2026

  5. 6,6 Media

    CVE-2026-97256: deserialización de datos no fiables en Page Builder by SiteOrigin

    CVE-2026-97256

    T−46d 30 sept. 2026

  6. 7,2 Alta

    CVE-2026-102385: cross-site scripting (XSS) en Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder

    CVE-2026-102385

    T−46d 30 sept. 2026

  7. 7,2 Alta

    CVE-2026-97271: cross-site scripting (XSS) en WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell

    CVE-2026-97271

    T−46d 30 sept. 2026

  8. 5,3 Media

    CVE-2026-97259: acceso a datos de otros usuarios (IDOR) en Pay with Vipps and MobilePay for WooCommerce

    CVE-2026-97259

    T−46d 30 sept. 2026

  9. 9,8 Crít.

    CVE-2026-94389: inyección de código en AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

    CVE-2026-94389

    T−46d 30 sept. 2026

  10. 7,2 Alta

    CVE-2026-94081: cross-site scripting (XSS) en Persistent Login

    CVE-2026-94081

    T−46d 30 sept. 2026

  11. 7,2 Alta

    CVE-2026-100507: cross-site scripting (XSS) en If-So Dynamic Content – Elementor & All Page Builders Personalization

    CVE-2026-100507

    T−46d 30 sept. 2026

  12. 6,4 Media

    CVE-2026-102386: cross-site scripting (XSS) en WP Photo Album Plus

    CVE-2026-102386

    T−46d 30 sept. 2026

  13. 7,2 Alta

    CVE-2026-102396: cross-site scripting (XSS) en Ultimate Maps by Supsystic – OpenStreetMap, Leaflet & Mapbox, No API Key

    CVE-2026-102396

    T−46d 30 sept. 2026

  14. 7,2 Alta

    CVE-2026-102398: cross-site scripting (XSS) en CES – Popup Builder, Optin Forms, Lead Generation, CRM & Email Marketing Automation

    CVE-2026-102398

    T−46d 30 sept. 2026

  15. 7,2 Alta

    CVE-2026-102395: cross-site scripting (XSS) en Easy Google Maps by Supsystic – Custom Markers, Clustering & Map Themes

    CVE-2026-102395

    T−46d 30 sept. 2026

  16. 7,2 Alta

    CVE-2026-97289: cross-site scripting (XSS) en Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker

    CVE-2026-97289

    T−46d 30 sept. 2026

  17. 7,2 Alta

    CVE-2026-97272: cross-site scripting (XSS) en Premmerce Permalink Manager for WooCommerce

    CVE-2026-97272

    T−46d 30 sept. 2026

  18. 6,4 Media

    CVE-2026-97270: cross-site scripting (XSS) en CMB2

    CVE-2026-97270

    T−46d 30 sept. 2026

  19. 6,4 Media

    CVE-2026-62084: cross-site scripting (XSS) en User Submitted Posts – Enable Users to Submit Posts from the Front End

    CVE-2026-62084

    T−46d 30 sept. 2026

  20. 4,3 Media

    CVE-2026-62081: acceso a datos de otros usuarios (IDOR) en Flexible PDF Coupons – Gift Cards & Vouchers for WooCommerce

    CVE-2026-62081

    T−46d 30 sept. 2026

  21. 6,4 Media

    CVE-2026-62078: cross-site scripting (XSS) en Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates

    CVE-2026-62078

    T−46d 30 sept. 2026

  22. 5,3 Media

    CVE-2026-97317: exposición de información sensible en Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers

    CVE-2026-97317

    T−46d 30 sept. 2026

  23. 4,3 Media

    CVE-2026-97219: vulnerabilidad en MStore API – Create Native Android & iOS Apps On The Cloud

    CVE-2026-97219

    T−46d 30 sept. 2026

  24. 4,7 Media

    CVE-2026-97318: redirección abierta en Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers

    CVE-2026-97318

    T−46d 30 sept. 2026

  25. 6,4 Media

    CVE-2026-97286: cross-site scripting (XSS) en Strong Testimonials

    CVE-2026-97286

    T−46d 30 sept. 2026

  26. 6,4 Media

    CVE-2026-97279: cross-site scripting (XSS) en Polylang

    CVE-2026-97279

    T−46d 30 sept. 2026

  27. 4,3 Media

    CVE-2026-102399: falsificación de peticiones (CSRF) en Photo Gallery by Supsystic – Image Gallery, Masonry, Albums & Lightbox

    CVE-2026-102399

    T−46d 30 sept. 2026

  28. 4,9 Media

    CVE-2026-62097: inyección SQL en Business Directory Plugin – Easy Listing & Member Directories for WordPress

    CVE-2026-62097

    T−46d 30 sept. 2026

  29. 6,5 Media

    CVE-2026-94298: inyección SQL en BuildKit – Product Builder for WooCommerce – Custom PC Builder

    CVE-2026-94298

    T−46d 30 sept. 2026

  30. 5,4 Media

    CVE-2026-12241: cross-site scripting (XSS) en Advanced Woo Labels – Product Labels & Badges for WooCommerce

    CVE-2026-12241

    T−46d 30 sept. 2026