Saltar al contenido

Radar en marcha

Bastion/Radar

[■] Plugin de WordPress

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

26 expedientes en el radar

Comprueba tu versión de UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP Sólo las que se están explotando

[■] Registro

Vulnerabilidades (26)

  1. 6,4 Media

    CVE-2026-120671: cross-site scripting (XSS) en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2026-120671

    T−8d 5 nov. 2026

  2. 6,5 Media

    CVE-2026-119980: autenticación incorrecta en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2026-119980

    T−14d 30 oct. 2026

  3. 4,3 Media

    CVE-2026-103086: falta de autorización en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2026-103086

    T−41d 3 oct. 2026

  4. 7,2 Alta

    CVE-2026-94641: cross-site scripting (XSS) en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2026-94641

    T−42d 3 oct. 2026

  5. 8,1 Alta

    CVE-2026-19991: recorrido de rutas (path traversal) en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2026-19991

    T−65d 10 sept. 2026

  6. 6,4 Media

    CVE-2026-18501: cross-site scripting (XSS) en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2026-18501

    T−100d 6 ago. 2026

  7. 8,8 Alta

    CVE-2026-13492: recorrido de rutas (path traversal) en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2026-13492

    T−128d 9 jul. 2026

  8. 5,3 Media

    CVE-2026-13690: vulnerabilidad en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2026-13690

    T−129d 8 jul. 2026

  9. 2,7 Baja

    CVE-2026-12102: acceso a datos de otros usuarios (IDOR) en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2026-12102

    T−149d 17 jun. 2026

  10. 5,0 Media

    CVE-2026-4979: falsificación de peticiones del servidor (SSRF) en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2026-4979

    T−218d 10 abr. 2026

  11. 4,3 Media

    CVE-2026-4977: falta de autorización en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2026-4977

    T−219d 9 abr. 2026

  12. 6,4 Media

    CVE-2026-5742: cross-site scripting (XSS) en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2026-5742

    T−220d 8 abr. 2026

  13. 4,3 Media

    CVE-2026-25015: falsificación de peticiones (CSRF) en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2026-25015

    T−290d 28 ene. 2026

  14. 4,3 Media

    CVE-2025-67593: falsificación de peticiones (CSRF) en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2025-67593

    T−334d 15 dic. 2025

  15. 5,3 Media

    CVE-2025-66072: falta de autorización en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2025-66072

    T−354d 25 nov. 2025

  16. 6,5 Media

    CVE-2025-10003: inyección SQL en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2025-10003

    T−435d 5 sept. 2025

  17. 6,4 Media

    CVE-2025-9344: cross-site scripting (XSS) en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2025-9344

    T−444d 27 ago. 2025

  18. 5,3 Media

    CVE-2024-43277: falta de autorización en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2024-43277

    T−820d 16 ago. 2024

  19. 5,3 Media

    CVE-2024-6477: exposición de información sensible en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2024-6477

    T−854d 13 jul. 2024

  20. 9,8 Crít.

    CVE-2024-6265: inyección SQL en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2024-6265

    T−869d 28 jun. 2024

  21. 4,3 Media

    CVE-2024-31936: falsificación de peticiones (CSRF) en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2024-31936

    T−948d 10 abr. 2024

  22. 6,4 Media

    CVE-2024-2423: cross-site scripting (XSS) en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2024-2423

    T−975d 14 mar. 2024

  23. 4,3 Media

    Falsificación de peticiones (CSRF) en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    T−1109d 1 nov. 2023

  24. 5,5 Media

    CVE-2022-47442: vulnerabilidad en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2022-47442

    T−1424d 21 dic. 2022

  25. 4,3 Media

    CVE-2022-0442: acceso a datos de otros usuarios (IDOR) en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2022-0442

    T−1734d 14 feb. 2022

  26. 6,1 Media

    Cross-site scripting (XSS) en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    T−1895d 6 sept. 2021