Saltar al contenido

Radar en marcha

Bastion/Radar

[■] Gestor de contenidos

WordPress

Web oficial

43.917 expedientes en el radar

Comprueba tu versión de WordPress Sólo las que se están explotando

[■] Para hacerlo bien

Guías

[■] Registro

Vulnerabilidades (43.917)

  1. 6,4 Media

    CVE-2026-115957: cross-site scripting (XSS) en Discussion Board – WordPress Forum Plugin

    CVE-2026-115957

    T−19d 26 oct. 2026

  2. 7,5 Alta

    CVE-2026-115607: inyección SQL en DXP ToolKit

    CVE-2026-115607

    T−19d 26 oct. 2026

  3. 7,2 Alta

    CVE-2026-115606: cross-site scripting (XSS) en DXP ToolKit

    CVE-2026-115606

    T−19d 26 oct. 2026

  4. 7,2 Alta

    CVE-2026-115609: cross-site scripting (XSS) en Payment forms, Buy now buttons, and Invoicing System | GetPaid

    CVE-2026-115609

    T−19d 26 oct. 2026

  5. 6,4 Media

    CVE-2026-114708: cross-site scripting (XSS) en JetSmartFilters

    CVE-2026-114708

    T−19d 26 oct. 2026

  6. 5,3 Media

    CVE-2026-115959: falta de autorización en WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce

    CVE-2026-115959

    T−19d 26 oct. 2026

  7. 5,3 Media

    CVE-2026-115595: falta de autorización en Contact Form by Supsystic – Drag & Drop Form Builder with Templates & Form Statistics

    CVE-2026-115595

    T−19d 26 oct. 2026

  8. 4,3 Media

    CVE-2026-115960: falta de autorización en WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce

    CVE-2026-115960

    T−19d 26 oct. 2026

  9. 6,4 Media

    CVE-2026-115956: cross-site scripting (XSS) en Panorama – Turn Photos into Immersive Virtual Tours

    CVE-2026-115956

    T−19d 26 oct. 2026

  10. 6,4 Media

    CVE-2026-115961: cross-site scripting (XSS) en bSlider – Build Sliders That Bring Your Content to Life

    CVE-2026-115961

    T−19d 26 oct. 2026

  11. 4,3 Media

    CVE-2026-115594: exposición de información sensible en Media Library Assistant

    CVE-2026-115594

    T−19d 26 oct. 2026

  12. 6,4 Media

    CVE-2026-114707: cross-site scripting (XSS) en JetElements

    CVE-2026-114707

    T−19d 26 oct. 2026

  13. 6,4 Media

    CVE-2026-115953: cross-site scripting (XSS) en Geo Mashup

    CVE-2026-115953

    T−19d 26 oct. 2026

  14. 6,5 Media

    CVE-2026-115608: inyección SQL en JetEngine

    CVE-2026-115608

    T−19d 26 oct. 2026

  15. 4,3 Media

    CVE-2026-115954: falta de autorización en Geo Mashup

    CVE-2026-115954

    T−19d 26 oct. 2026

  16. 6,4 Media

    CVE-2026-115950: cross-site scripting (XSS) en Better Post & Filter Widgets for Elementor

    CVE-2026-115950

    T−19d 26 oct. 2026

  17. 6,4 Media

    CVE-2026-115951: cross-site scripting (XSS) en Lazy Load for Videos

    CVE-2026-115951

    T−19d 26 oct. 2026

  18. 6,5 Media

    CVE-2026-115948: inyección SQL en Media Library Assistant

    CVE-2026-115948

    T−19d 26 oct. 2026

  19. 6,1 Media

    CVE-2026-114709: cross-site scripting (XSS) en Ad Inserter – Ad Manager & AdSense Ads

    CVE-2026-114709

    T−19d 26 oct. 2026

  20. 4,3 Media

    CVE-2026-115949: falta de autorización en Better Post & Filter Widgets for Elementor

    CVE-2026-115949

    T−19d 26 oct. 2026

  21. 5,3 Media

    CVE-2026-115614: falta de autorización en Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment

    CVE-2026-115614

    T−19d 26 oct. 2026

  22. 5,3 Media

    CVE-2026-97255: acceso a datos de otros usuarios (IDOR) en Royal Addons for Elementor – Addons and Templates Kit for Elementor

    CVE-2026-97255

    T−19d 26 oct. 2026

  23. 6,4 Media

    CVE-2026-97254: cross-site scripting (XSS) en Royal Addons for Elementor – Addons and Templates Kit for Elementor

    CVE-2026-97254

    T−19d 26 oct. 2026

  24. 4,3 Media

    CVE-2026-97295: falsificación de peticiones (CSRF) en Media Library Assistant

    CVE-2026-97295

    T−19d 26 oct. 2026

  25. 6,4 Media

    CVE-2026-112865: cross-site scripting (XSS) en Royal Addons for Elementor – Addons and Templates Kit for Elementor

    CVE-2026-112865

    T−19d 26 oct. 2026

  26. 5,3 Media

    CVE-2026-110377: falta de autorización en Bopo – WooCommerce Product Bundle Builder

    CVE-2026-110377

    T−19d 26 oct. 2026

  27. 6,4 Media

    CVE-2026-115602: cross-site scripting (XSS) en Kadence Blocks — Page Builder Toolkit for Gutenberg Editor

    CVE-2026-115602

    T−19d 26 oct. 2026

  28. 6,4 Media

    CVE-2026-115613: cross-site scripting (XSS) en Image Gallery Block – Showcase Photos in Stunning Responsive Grids

    CVE-2026-115613

    T−19d 26 oct. 2026

  29. 5,3 Media

    CVE-2026-115958: falta de autorización en Discussion Board – WordPress Forum Plugin

    CVE-2026-115958

    T−19d 26 oct. 2026

  30. 4,3 Media

    CVE-2026-110376: falta de autorización en DEPART – Deposit and Part payment for Woo

    CVE-2026-110376

    T−19d 26 oct. 2026