Saltar al contenido

Radar en marcha

Bastion/Radar

[■] Gestor de contenidos

WordPress

Web oficial

43.917 expedientes en el radar

Comprueba tu versión de WordPress Sólo las que se están explotando

[■] Para hacerlo bien

Guías

[■] Registro

Vulnerabilidades (43.917)

  1. 6,4 Media

    CVE-2026-115869: cross-site scripting (XSS) en Themify Builder

    CVE-2026-115869

    T−15d 30 oct. 2026

  2. 8,1 Alta

    CVE-2026-120538: autenticación incorrecta en Easy Digital Downloads – eCommerce Payments and Subscriptions made easy

    CVE-2026-120538

    T−15d 30 oct. 2026

  3. 4,3 Media

    CVE-2026-62141: falta de autorización en FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution

    CVE-2026-62141

    T−15d 30 oct. 2026

  4. 7,5 Alta

    CVE-2026-62048: inyección SQL en Bookit — Booking & Appointment Calendar

    CVE-2026-62048

    T−15d 30 oct. 2026

  5. 6,4 Media

    CVE-2026-119369: cross-site scripting (XSS) en The Events Calendar

    CVE-2026-119369

    T−15d 30 oct. 2026

  6. 4,3 Media

    CVE-2026-116407: falta de autorización en Easy Appointment Booking & Scheduling Plugin – Webba Booking Calendar

    CVE-2026-116407

    T−15d 30 oct. 2026

  7. 5,3 Media

    CVE-2026-119368: falta de autorización en The Events Calendar

    CVE-2026-119368

    T−15d 30 oct. 2026

  8. 8,1 Alta

    CVE-2026-120574: autenticación incorrecta en SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments

    CVE-2026-120574

    T−15d 30 oct. 2026

  9. 5,3 Media

    CVE-2026-119482: falta de autorización en JetFormBuilder — Dynamic Blocks Form Builder

    CVE-2026-119482

    T−15d 30 oct. 2026

  10. 7,4 Alta

    CVE-2026-118205: gestión incorrecta de privilegios en Essential Addons for Elementor – Popular Elementor Templates & Widgets

    CVE-2026-118205

    T−15d 30 oct. 2026

  11. 4,3 Media

    CVE-2026-109592: falta de autorización en OpenStation – Admin Dashboard Notes, Custom Dashboard, AI Assistant & PWA

    CVE-2026-109592

    T−15d 30 oct. 2026

  12. 5,3 Media

    CVE-2026-116860: falta de autorización en Timetics – Appointment Booking Calendar & Scheduling

    CVE-2026-116860

    T−15d 30 oct. 2026

  13. 6,4 Media

    CVE-2026-119370: cross-site scripting (XSS) en The Events Calendar

    CVE-2026-119370

    T−15d 30 oct. 2026

  14. 6,4 Media

    CVE-2026-65444: cross-site scripting (XSS) en Blocksy Companion

    CVE-2026-65444

    T−15d 30 oct. 2026

  15. 6,4 Media

    CVE-2026-102918: cross-site scripting (XSS) en Redux Framework

    CVE-2026-102918

    T−15d 30 oct. 2026

  16. 7,5 Alta

    CVE-2026-110305: exposición de información sensible en Advanced Custom Fields: Extended

    CVE-2026-110305

    T−15d 30 oct. 2026

  17. 7,5 Alta

    CVE-2026-73186: deserialización de datos no fiables en Enable Media Replace

    CVE-2026-73186

    T−15d 30 oct. 2026

  18. 8,8 Alta

    CVE-2026-116852: inyección de código en Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets

    CVE-2026-116852

    T−15d 30 oct. 2026

  19. 7,5 Alta

    CVE-2026-78527: deserialización de datos no fiables en Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews

    CVE-2026-78527

    T−15d 30 oct. 2026

  20. 6,6 Media

    CVE-2026-118089: deserialización de datos no fiables en Product Feed Manager for WooCommerce – RexFeed – Sell on 200+ Shopping Channels

    CVE-2026-118089

    T−15d 30 oct. 2026

  21. 7,2 Alta

    CVE-2026-94175: cross-site scripting (XSS) en All In One Login

    CVE-2026-94175

    T−15d 30 oct. 2026

  22. 8,1 Alta

    CVE-2026-90888: deserialización de datos no fiables en LeadSnap

    CVE-2026-90888

    T−15d 30 oct. 2026

  23. 7,2 Alta

    CVE-2026-105077: cross-site scripting (XSS) en Ad Inserter – Ad Manager & AdSense Ads

    CVE-2026-105077

    T−15d 30 oct. 2026

  24. 6,3 Media

    CVE-2026-118086: gestión incorrecta de privilegios en WP BASE Booking of Appointments, Services and Events

    CVE-2026-118086

    T−15d 30 oct. 2026

  25. 5,3 Media

    CVE-2026-115947: exposición de información sensible en HUSKY – Products Filter for WooCommerce Professional. MCP is onboard

    CVE-2026-115947

    T−15d 30 oct. 2026

  26. 6,4 Media

    CVE-2026-114711: cross-site scripting (XSS) en MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions

    CVE-2026-114711

    T−15d 30 oct. 2026

  27. 7,2 Alta

    CVE-2026-116847: cross-site scripting (XSS) en Mang Board

    CVE-2026-116847

    T−15d 30 oct. 2026

  28. 7,2 Alta

    CVE-2026-116405: cross-site scripting (XSS) en VikRentCar Car Rental Management System

    CVE-2026-116405

    T−15d 30 oct. 2026

  29. 5,3 Media

    CVE-2026-116853: falta de autorización en GiveWP – Donation Plugin and Fundraising Platform

    CVE-2026-116853

    T−15d 30 oct. 2026

  30. 7,2 Alta

    CVE-2026-116851: cross-site scripting (XSS) en eCommerce Product Catalog

    CVE-2026-116851

    T−15d 30 oct. 2026