Saltar al contenido

Radar en marcha

Bastion/Radar

[■] Gestor de contenidos

WordPress

Web oficial

43.917 expedientes en el radar

Comprueba tu versión de WordPress Sólo las que se están explotando

[■] Para hacerlo bien

Guías

[■] Registro

Vulnerabilidades (43.917)

  1. 6,6 Media

    CVE-2026-94677: deserialización de datos no fiables en Kadence WooCommerce Email Designer

    CVE-2026-94677

    T−52d 24 sept. 2026

  2. 5,3 Media

    CVE-2026-96823: falta de autorización en Customer Reviews for WooCommerce

    CVE-2026-96823

    T−52d 24 sept. 2026

  3. 4,3 Media

    CVE-2026-96347: acceso a datos de otros usuarios (IDOR) en Online Scheduling and Appointment Booking System – Bookly

    CVE-2026-96347

    T−52d 24 sept. 2026

  4. 7,2 Alta

    CVE-2026-96836: cross-site scripting (XSS) en Parsi Date | بسته فارسی ساز وردپرس و ووکامرس پارسی دیت

    CVE-2026-96836

    T−52d 24 sept. 2026

  5. 6,6 Media

    CVE-2026-96833: deserialización de datos no fiables en Ultra Addons for Contact Form 7

    CVE-2026-96833

    T−52d 24 sept. 2026

  6. 7,5 Alta

    CVE-2026-94678: deserialización de datos no fiables en Go Live Update Urls

    CVE-2026-94678

    T−52d 24 sept. 2026

  7. 7,2 Alta

    CVE-2026-97077: cross-site scripting (XSS) en Ad Inserter – Ad Manager & AdSense Ads

    CVE-2026-97077

    T−52d 24 sept. 2026

  8. 6,5 Media

    CVE-2026-96824: recorrido de rutas (path traversal) en Template Kit – Import

    CVE-2026-96824

    T−52d 24 sept. 2026

  9. 7,5 Alta

    CVE-2026-94681: consumo de recursos sin control en WP Store Locator

    CVE-2026-94681

    T−52d 24 sept. 2026

  10. 7,2 Alta

    CVE-2026-97253: cross-site scripting (XSS) en LayerSlider

    CVE-2026-97253

    T−52d 24 sept. 2026

  11. 7,5 Alta

    CVE-2026-94123: recorrido de rutas (path traversal) en Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

    CVE-2026-94123

    T−52d 24 sept. 2026

  12. 6,4 Media

    CVE-2026-97236: cross-site scripting (XSS) en ThemeREX Addons

    CVE-2026-97236

    T−52d 24 sept. 2026

  13. 7,2 Alta

    CVE-2026-94078: cross-site scripting (XSS) en Site Reviews

    CVE-2026-94078

    T−52d 24 sept. 2026

  14. 7,2 Alta

    CVE-2026-96830: cross-site scripting (XSS) en GiveWP – Donation Plugin and Fundraising Platform

    CVE-2026-96830

    T−52d 24 sept. 2026

  15. 4,3 Media

    CVE-2026-97079: acceso a datos de otros usuarios (IDOR) en Easy Appointment Booking & Scheduling Plugin – Webba Booking Calendar

    CVE-2026-97079

    T−52d 24 sept. 2026

  16. 7,5 Alta

    CVE-2026-94121: deserialización de datos no fiables en 10Web Booster – Website speed optimization, Cache & Page Speed optimizer

    CVE-2026-94121

    T−52d 24 sept. 2026

  17. 6,4 Media

    CVE-2026-16591: cross-site scripting (XSS) en WP Directory Kit

    CVE-2026-16591

    T−52d 24 sept. 2026

  18. 5,3 Media

    CVE-2026-96348: falta de autorización en Online Scheduling and Appointment Booking System – Bookly

    CVE-2026-96348

    T−52d 24 sept. 2026

  19. 6,3 Media

    CVE-2026-94178: gestión incorrecta de privilegios en Import and export users and customers

    CVE-2026-94178

    T−52d 24 sept. 2026

  20. 6,5 Media

    CVE-2026-84744: inyección de código en WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More

    CVE-2026-84744

    T−52d 24 sept. 2026

  21. 7,2 Alta

    CVE-2026-97065: cross-site scripting (XSS) en Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms

    CVE-2026-97065

    T−52d 24 sept. 2026

  22. 7,5 Alta

    CVE-2026-94076: deserialización de datos no fiables en GEO Plugin by Squirrly SEO

    CVE-2026-94076

    T−52d 24 sept. 2026

  23. 6,4 Media

    CVE-2026-96835: cross-site scripting (XSS) en King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder

    CVE-2026-96835

    T−52d 24 sept. 2026

  24. 6,4 Media

    CVE-2026-97238: cross-site scripting (XSS) en JetEngine

    CVE-2026-97238

    T−52d 24 sept. 2026

  25. 6,4 Media

    CVE-2026-96531: cross-site scripting (XSS) en Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization

    CVE-2026-96531

    T−52d 24 sept. 2026

  26. 6,4 Media

    CVE-2026-94674: cross-site scripting (XSS) en Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing

    CVE-2026-94674

    T−52d 24 sept. 2026

  27. 6,3 Media

    CVE-2026-96350: gestión incorrecta de privilegios en Estatik Real Estate Plugin

    CVE-2026-96350

    T−52d 24 sept. 2026

  28. 4,3 Media

    CVE-2026-96834: exposición de información sensible en GiveWP – Donation Plugin and Fundraising Platform

    CVE-2026-96834

    T−52d 24 sept. 2026

  29. 5,3 Media

    CVE-2026-89411: vulnerabilidad en Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management

    CVE-2026-89411

    T−52d 24 sept. 2026

  30. 6,5 Media

    CVE-2026-84097: inyección SQL en WP Review Slider Pro

    CVE-2026-84097

    T−52d 24 sept. 2026