Saltar al contenido

Radar en marcha

Bastion/Radar

[■] Gestor de contenidos

WordPress

Web oficial

43.919 expedientes en el radar

Comprueba tu versión de WordPress Sólo las que se están explotando

[■] Para hacerlo bien

Guías

[■] Registro

Vulnerabilidades (43.919)

  1. 4,3 Media

    CVE-2026-19840: falta de autorización en Notiqoo – Order Notification & Customer Chat for WooCommerce

    CVE-2026-19840

    T−66d 10 sept. 2026

  2. 5,3 Media

    CVE-2026-19439: exposición de información sensible en Ultimate Gift Cards for WooCommerce

    CVE-2026-19439

    T−66d 10 sept. 2026

  3. 8,8 Alta

    CVE-2024-0757: subida de ficheros peligrosos en Insert or Embed Articulate Content into WordPress

    CVE-2024-0757

    T−66d 10 sept. 2026

  4. 5,3 Media

    CVE-2026-87916: exposición de información sensible en WPBot – AI ChatBot for WordPress & Growth Suite: SEO, AI Writer, Email Marketing, Social Media

    CVE-2026-87916

    T−66d 10 sept. 2026

  5. 5,3 Media

    CVE-2026-62136: falta de autorización en Flexible Quantity & Price Calculator for WooCommerce

    CVE-2026-62136

    T−66d 10 sept. 2026

  6. 5,3 Media

    CVE-2026-77689: vulnerabilidad en Booking for Appointments and Events Calendar – Amelia

    CVE-2026-77689

    T−66d 10 sept. 2026

  7. 8,1 Alta

    CVE-2026-77005: recorrido de rutas (path traversal) en CODE MONKEYS PROPOSALS – Easily create client proposals from your WordPress admin dashboard

    CVE-2026-77005

    T−66d 10 sept. 2026

  8. 6,4 Media

    CVE-2026-6641: cross-site scripting (XSS) en Media Library Assistant

    CVE-2026-6641

    T−66d 10 sept. 2026

  9. 7,5 Alta

    CVE-2026-82845: deserialización de datos no fiables en Masteriyo LMS – LMS Course Builder, Quizzes & Certificates

    CVE-2026-82845

    T−66d 10 sept. 2026

  10. 6,4 Media

    CVE-2026-5399: cross-site scripting (XSS) en Redux Framework

    CVE-2026-5399

    T−66d 9 sept. 2026

  11. 6,4 Media

    CVE-2026-15889: cross-site scripting (XSS) en Aruba HiSpeed Cache

    CVE-2026-15889

    T−66d 9 sept. 2026

  12. 6,1 Media

    CVE-2026-85645: cross-site scripting (XSS) en Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

    CVE-2026-85645

    T−67d 9 sept. 2026

  13. 6,4 Media

    CVE-2026-4657: cross-site scripting (XSS) en Easy Google Fonts

    CVE-2026-4657

    T−67d 9 sept. 2026

  14. 4,3 Media

    CVE-2026-18594: falta de autorización en Advanced Contact form 7 DB

    CVE-2026-18594

    T−67d 9 sept. 2026

  15. 4,9 Media

    CVE-2026-18386: recorrido de rutas (path traversal) en WP BackItUp Community Edition

    CVE-2026-18386

    T−67d 9 sept. 2026

  16. 4,3 Media

    CVE-2026-15823: falta de autorización en Builderall for WordPress

    CVE-2026-15823

    T−67d 9 sept. 2026

  17. 6,4 Media

    CVE-2026-15820: cross-site scripting (XSS) en Builderall for WordPress

    CVE-2026-15820

    T−67d 9 sept. 2026

  18. 6,4 Media

    CVE-2026-15796: cross-site scripting (XSS) en Builderall for WordPress

    CVE-2026-15796

    T−67d 9 sept. 2026

  19. 7,2 Alta

    CVE-2026-76562: cross-site scripting (XSS) en Sidebar Manager Light

    CVE-2026-76562

    T−67d 9 sept. 2026

  20. 8,0 Alta

    CVE-2026-14873: falta de autorización en Bulk Password Reset

    CVE-2026-14873

    T−67d 9 sept. 2026

  21. 7,5 Alta

    CVE-2026-15019: recorrido de rutas (path traversal) en Direct Download for WooCommerce

    CVE-2026-15019

    T−67d 9 sept. 2026

  22. 6,4 Media

    CVE-2025-15690: cross-site scripting (XSS) en Content Mask

    CVE-2025-15690

    T−67d 9 sept. 2026

  23. 5,3 Media

    CVE-2026-81794: falta de autorización en Shirt Product Designer for WooCommerce

    CVE-2026-81794

    T−67d 9 sept. 2026

  24. 6,4 Media

    CVE-2026-14565: cross-site scripting (XSS) en Advanced Customized Prompts

    CVE-2026-14565

    T−67d 9 sept. 2026

  25. 7,2 Alta

    CVE-2026-84816: cross-site scripting (XSS) en WPCS – WordPress Currency Switcher Professional

    CVE-2026-84816

    T−67d 9 sept. 2026

  26. 4,4 Media

    CVE-2025-15695: cross-site scripting (XSS) en Translate WordPress with GTranslate

    CVE-2025-15695

    T−67d 9 sept. 2026

  27. 7,3 Alta

    CVE-2026-81805: gestión incorrecta de privilegios en SiteSkite – Secure MCP & AI WebOps. Connect ChatGPT, Claude, or Any AI Agent via MCP

    CVE-2026-81805

    T−67d 9 sept. 2026

  28. 9,1 Crít.

    CVE-2026-81789: recorrido de rutas (path traversal) en Advanced Product Fields Extended for WooCommerce

    CVE-2026-81789

    T−67d 9 sept. 2026

  29. 5,3 Media

    CVE-2026-86813: inyección en MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor

    CVE-2026-86813

    T−67d 9 sept. 2026

  30. 5,3 Media

    CVE-2026-86809: vulnerabilidad en المنتور فارسی

    CVE-2026-86809

    T−67d 9 sept. 2026