Saltar al contenido

Radar en marcha

Bastion/Radar

[■] Gestor de contenidos

WordPress

Web oficial

43.919 expedientes en el radar

Comprueba tu versión de WordPress Sólo las que se están explotando

[■] Para hacerlo bien

Guías

[■] Registro

Vulnerabilidades (43.919)

  1. 6,4 Media

    CVE-2026-15402: cross-site scripting (XSS) en Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce

    CVE-2026-15402

    T−62d 14 sept. 2026

  2. 6,5 Media

    CVE-2026-89141: acceso a datos de otros usuarios (IDOR) en AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini

    CVE-2026-89141

    T−62d 14 sept. 2026

  3. 5,3 Media

    CVE-2026-15758: exposición de información sensible en 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

    CVE-2026-15758

    T−62d 14 sept. 2026

  4. 5,4 Media

    CVE-2026-85657: cross-site scripting (XSS) en Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors

    CVE-2026-85657

    T−62d 14 sept. 2026

  5. 6,4 Media

    CVE-2026-85575: cross-site scripting (XSS) en ShopEngine – All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets

    CVE-2026-85575

    T−62d 14 sept. 2026

  6. 4,3 Media

    CVE-2026-82519: falta de autorización en Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

    CVE-2026-82519

    T−62d 14 sept. 2026

  7. 4,3 Media

    CVE-2026-74926: falta de autorización en MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions

    CVE-2026-74926

    T−62d 14 sept. 2026

  8. 7,3 Alta

    CVE-2026-85530: gestión incorrecta de privilegios en GiveWP – Donation Plugin and Fundraising Platform

    CVE-2026-85530

    T−62d 14 sept. 2026

  9. 4,9 Media

    CVE-2026-76553: vulnerabilidad en WP Import Export Lite

    CVE-2026-76553

    T−62d 14 sept. 2026

  10. 7,5 Alta

    CVE-2026-78472: inyección SQL en Ni WooCommerce Sales Report – Orders, Revenue & Sales Analytics Dashboard

    CVE-2026-78472

    T−62d 14 sept. 2026

  11. 5,4 Media

    CVE-2026-86823: redirección abierta en Newsletter

    CVE-2026-86823

    T−62d 14 sept. 2026

  12. 4,3 Media

    CVE-2026-87959: falta de autorización en WPBot – AI ChatBot for WordPress & Growth Suite: SEO, AI Writer, Email Marketing, Social Media

    CVE-2026-87959

    T−62d 14 sept. 2026

  13. 4,3 Media

    CVE-2026-85572: exposición de información sensible en Tutor LMS – eLearning and online course solution

    CVE-2026-85572

    T−62d 14 sept. 2026

  14. 4,3 Media

    CVE-2026-85569: vulnerabilidad en Tutor LMS – eLearning and online course solution

    CVE-2026-85569

    T−62d 14 sept. 2026

  15. 4,3 Media

    CVE-2026-89328: falta de autorización en FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration

    CVE-2026-89328

    T−62d 14 sept. 2026

  16. 4,3 Media

    CVE-2026-89327: vulnerabilidad en FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration

    CVE-2026-89327

    T−62d 14 sept. 2026

  17. 5,3 Media

    CVE-2026-84907: falta de autorización en Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce

    CVE-2026-84907

    T−62d 14 sept. 2026

  18. 7,2 Alta

    CVE-2026-76551: inyección de código en WP Import Export Lite

    CVE-2026-76551

    T−62d 14 sept. 2026

  19. 7,5 Alta

    CVE-2026-80491: inyección SQL en SAMO Forms

    CVE-2026-80491

    T−62d 14 sept. 2026

  20. 4,3 Media

    CVE-2026-85349: exposición de información sensible en FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration

    CVE-2026-85349

    T−62d 14 sept. 2026

  21. 5,3 Media

    CVE-2026-84906: vulnerabilidad en Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce

    CVE-2026-84906

    T−62d 14 sept. 2026

  22. 7,2 Alta

    CVE-2026-84829: cross-site scripting (XSS) en Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization

    CVE-2026-84829

    T−62d 14 sept. 2026

  23. 5,3 Media

    CVE-2026-86447: exposición de información sensible en LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

    CVE-2026-86447

    T−62d 14 sept. 2026

  24. 5,3 Media

    CVE-2026-82125: acceso a datos de otros usuarios (IDOR) en Schema & Structured Data for WP & AMP

    CVE-2026-82125

    T−62d 14 sept. 2026

  25. 4,3 Media

    CVE-2026-84905: falta de autorización en Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce

    CVE-2026-84905

    T−62d 14 sept. 2026

  26. 7,2 Alta

    CVE-2026-88793: cross-site scripting (XSS) en YouTube Embed – YouTube Gallery, Vimeo Gallery – WordPress Plugin

    CVE-2026-88793

    T−62d 14 sept. 2026

  27. 6,4 Media

    CVE-2026-84088: cross-site scripting (XSS) en Xpro Addons — 150+ Widgets for Elementor

    CVE-2026-84088

    T−62d 14 sept. 2026

  28. 8,8 Alta

    CVE-2026-14805: gestión incorrecta de privilegios en Consulting

    CVE-2026-14805

    T−62d 14 sept. 2026

  29. 6,3 Media

    CVE-2026-87759: gestión incorrecta de privilegios en Add User Autocomplete

    CVE-2026-87759

    T−62d 14 sept. 2026

  30. 5,3 Media

    CVE-2026-82124: exposición de información sensible en Schema & Structured Data for WP & AMP

    CVE-2026-82124

    T−62d 14 sept. 2026