Saltar al contenido

Radar en marcha

Bastion/Radar

[■] Gestor de contenidos

WordPress

Web oficial

43.917 expedientes en el radar

Comprueba tu versión de WordPress Sólo las que se están explotando

[■] Para hacerlo bien

Guías

[■] Registro

Vulnerabilidades (43.917)

  1. 4,9 Media

    CVE-2026-109687: inyección SQL en Link Whisper Free

    CVE-2026-109687

    T−33d 13 oct. 2026

  2. 7,5 Alta

    CVE-2026-91833: inyección SQL en WX Subscribe 微信支付付费订阅

    CVE-2026-91833

    T−33d 13 oct. 2026

  3. 6,4 Media

    CVE-2026-108490: cross-site scripting (XSS) en Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates

    CVE-2026-108490

    T−33d 13 oct. 2026

  4. 5,3 Media

    CVE-2026-74923: exposición de información sensible en Document Gallery

    CVE-2026-74923

    T−33d 13 oct. 2026

  5. 5,3 Media

    CVE-2026-103304: falta de autorización en eaSYNC Booking – Hotels, Restaurants & Car Rentals

    CVE-2026-103304

    T−33d 13 oct. 2026

  6. 6,4 Media

    CVE-2026-54867: cross-site scripting (XSS) en Responsive Slider

    CVE-2026-54867

    T−33d 13 oct. 2026

  7. 8,1 Alta

    CVE-2026-54857: deserialización de datos no fiables en Quirky - NFT, Token & Artist Marketplace WordPress Theme

    CVE-2026-54857

    T−33d 13 oct. 2026

  8. 7,3 Alta

    CVE-2026-92429: vulnerabilidad en Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit

    CVE-2026-92429

    T−33d 13 oct. 2026

  9. 7,3 Alta

    CVE-2026-92428: vulnerabilidad en Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit

    CVE-2026-92428

    T−33d 13 oct. 2026

  10. 6,4 Media

    CVE-2026-54869: cross-site scripting (XSS) en IMPress for IDX Broker

    CVE-2026-54869

    T−33d 13 oct. 2026

  11. 6,4 Media

    CVE-2026-89269: cross-site scripting (XSS) en WP Testimonials

    CVE-2026-89269

    T−33d 13 oct. 2026

  12. 6,4 Media

    CVE-2026-108495: cross-site scripting (XSS) en SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz

    CVE-2026-108495

    T−33d 13 oct. 2026

  13. 6,4 Media

    CVE-2026-74921: cross-site scripting (XSS) en Document Gallery

    CVE-2026-74921

    T−33d 13 oct. 2026

  14. 4,9 Media

    CVE-2026-108179: inyección SQL en WOLF – WordPress Posts Bulk Editor and Manager Professional

    CVE-2026-108179

    T−33d 13 oct. 2026

  15. 4,3 Media

    CVE-2026-105974: exposición de información sensible en Visual Form Builder

    CVE-2026-105974

    T−33d 13 oct. 2026

  16. 7,2 Alta

    CVE-2026-102007: cross-site scripting (XSS) en Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation

    CVE-2026-102007

    T−33d 12 oct. 2026

  17. 4,9 Media

    CVE-2026-15399: inyección SQL en Animated Number Counters

    CVE-2026-15399

    T−33d 12 oct. 2026

  18. 7,2 Alta

    CVE-2026-102562: cross-site scripting (XSS) en AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

    CVE-2026-102562

    T−33d 12 oct. 2026

  19. 4,3 Media

    CVE-2026-89097: exposición de información sensible en Ad Inserter – Ad Manager & AdSense Ads

    CVE-2026-89097

    T−33d 12 oct. 2026

  20. 4,3 Media

    CVE-2026-61994: falta de autorización en WP-Members Membership Plugin

    CVE-2026-61994

    T−33d 12 oct. 2026

  21. 5,3 Media

    CVE-2026-108480: falta de autorización en Skydropx

    CVE-2026-108480

    T−33d 12 oct. 2026

  22. 7,2 Alta

    CVE-2026-108484: cross-site scripting (XSS) en Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management

    CVE-2026-108484

    T−33d 12 oct. 2026

  23. 6,1 Media

    CVE-2026-108483: cross-site scripting (XSS) en Hippoo Mobile App for WooCommerce

    CVE-2026-108483

    T−33d 12 oct. 2026

  24. 6,1 Media

    CVE-2026-105066: cross-site scripting (XSS) en SimplyRETS Real Estate IDX

    CVE-2026-105066

    T−33d 12 oct. 2026

  25. 9,8 Crít.

    CVE-2026-108151: inyección de código en MDTF – Meta Data and Taxonomies Filter

    CVE-2026-108151

    T−33d 12 oct. 2026

  26. 4,3 Media

    CVE-2026-108479: falsificación de peticiones (CSRF) en Patreon WordPress

    CVE-2026-108479

    T−33d 12 oct. 2026

  27. 4,3 Media

    CVE-2026-108481: falsificación de peticiones (CSRF) en Patreon WordPress

    CVE-2026-108481

    T−33d 12 oct. 2026

  28. 5,3 Media

    CVE-2026-103080: falta de autorización en Salevo Boost Sales for WooCommerce – Set up Up-Sells & Cross-Sells Popups & Auto Apply Coupon

    CVE-2026-103080

    T−33d 12 oct. 2026

  29. 6,4 Media

    CVE-2026-107862: cross-site scripting (XSS) en Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker

    CVE-2026-107862

    T−33d 12 oct. 2026

  30. 6,4 Media

    CVE-2026-108482: cross-site scripting (XSS) en Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates

    CVE-2026-108482

    T−33d 12 oct. 2026