Saltar al contenido

Radar en marcha

Bastion/Radar

[■] Gestor de contenidos

WordPress

Web oficial

43.917 expedientes en el radar

Comprueba tu versión de WordPress Sólo las que se están explotando

[■] Para hacerlo bien

Guías

[■] Registro

Vulnerabilidades (43.917)

  1. 5,3 Media

    CVE-2026-54853: falta de autorización en User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

    CVE-2026-54853

    T−16d 29 oct. 2026

  2. 5,3 Media

    CVE-2026-27063: falta de autorización en Kit (formerly ConvertKit) – Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership

    CVE-2026-27063

    T−16d 29 oct. 2026

  3. 6,4 Media

    CVE-2026-114706: cross-site scripting (XSS) en Strong Testimonials

    CVE-2026-114706

    T−16d 29 oct. 2026

  4. 6,4 Media

    CVE-2026-116850: cross-site scripting (XSS) en HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates

    CVE-2026-116850

    T−16d 29 oct. 2026

  5. 5,3 Media

    CVE-2026-25450: falta de autorización en User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

    CVE-2026-25450

    T−16d 29 oct. 2026

  6. 5,3 Media

    CVE-2026-114181: falta de autorización en E-cab Taxi Booking Manager for Woocommerce

    CVE-2026-114181

    T−16d 29 oct. 2026

  7. 5,3 Media

    CVE-2026-54871: falta de autorización en ShopBuilder – WooCommerce Builder For Elementor

    CVE-2026-54871

    T−16d 29 oct. 2026

  8. 4,3 Media

    CVE-2026-115605: falta de autorización en SureDash – Community, Courses & Member Dashboard

    CVE-2026-115605

    T−16d 29 oct. 2026

  9. 5,3 Media

    CVE-2026-118088: falta de autorización en WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell

    CVE-2026-118088

    T−16d 29 oct. 2026

  10. 6,4 Media

    CVE-2026-110881: cross-site scripting (XSS) en SureDash – Community, Courses & Member Dashboard

    CVE-2026-110881

    T−16d 29 oct. 2026

  11. 6,4 Media

    CVE-2026-116849: cross-site scripting (XSS) en StreamCast – bring live radio to your site with a sleek player

    CVE-2026-116849

    T−16d 29 oct. 2026

  12. 5,3 Media

    CVE-2026-116856: falta de autorización en Flexible Quantity & Price Calculator for WooCommerce

    CVE-2026-116856

    T−16d 29 oct. 2026

  13. 6,4 Media

    CVE-2026-39737: cross-site scripting (XSS) en JetElements

    CVE-2026-39737

    T−16d 29 oct. 2026

  14. 5,3 Media

    CVE-2026-116387: falta de autorización en SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz

    CVE-2026-116387

    T−16d 29 oct. 2026

  15. 5,3 Media

    CVE-2026-118091: falta de autorización en WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell

    CVE-2026-118091

    T−16d 29 oct. 2026

  16. 6,4 Media

    CVE-2026-39742: cross-site scripting (XSS) en Kadence Blocks — Page Builder Toolkit for Gutenberg Editor

    CVE-2026-39742

    T−16d 29 oct. 2026

  17. 6,4 Media

    CVE-2026-115610: cross-site scripting (XSS) en Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors

    CVE-2026-115610

    T−16d 29 oct. 2026

  18. 4,3 Media

    CVE-2026-118092: falta de autorización en MasterStudy LMS WordPress Plugin – for Online Courses and Education

    CVE-2026-118092

    T−16d 29 oct. 2026

  19. 4,3 Media

    CVE-2026-116406: falta de autorización en Easy Appointment Booking & Scheduling Plugin – Webba Booking Calendar

    CVE-2026-116406

    T−16d 29 oct. 2026

  20. 4,3 Media

    CVE-2026-52708: falta de autorización en User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

    CVE-2026-52708

    T−16d 29 oct. 2026

  21. 5,3 Media

    CVE-2026-116846: falta de autorización en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

    CVE-2026-116846

    T−16d 29 oct. 2026

  22. 5,3 Media

    CVE-2026-48884: falta de autorización en User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

    CVE-2026-48884

    T−16d 29 oct. 2026

  23. 6,5 Media

    CVE-2026-39736: inyección SQL en JetEngine

    CVE-2026-39736

    T−16d 29 oct. 2026

  24. 5,3 Media

    CVE-2026-39782: falta de autorización en Kali Forms — Contact Form & Drag-and-Drop Builder

    CVE-2026-39782

    T−16d 29 oct. 2026

  25. 4,3 Media

    CVE-2026-116399: falsificación de peticiones (CSRF) en InstaWP Connect – 1-click WP Staging & Migration

    CVE-2026-116399

    T−16d 29 oct. 2026

  26. 6,4 Media

    CVE-2026-116857: cross-site scripting (XSS) en JetSmartFilters

    CVE-2026-116857

    T−16d 29 oct. 2026

  27. 6,4 Media

    CVE-2026-54862: cross-site scripting (XSS) en Import and export users and customers

    CVE-2026-54862

    T−16d 29 oct. 2026

  28. 4,3 Media

    CVE-2026-42707: falta de autorización en HivePress Claim Listings

    CVE-2026-42707

    T−16d 29 oct. 2026

  29. 6,4 Media

    CVE-2026-48195: cross-site scripting (XSS) en PDF Poster – Let visitors read PDF’s without leaving the page

    CVE-2026-48195

    T−16d 29 oct. 2026

  30. 5,3 Media

    CVE-2026-39741: falta de autorización en Simple CAPTCHA with Cloudflare Turnstile

    CVE-2026-39741

    T−16d 29 oct. 2026