[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

Tecnología Gravedad Sólo las que se están explotando

7,2 Alta

CVE-2026-97271: cross-site scripting (XSS) en WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell

CVE-2026-97271

T−46d 30 sept. 2026
5,3 Media

CVE-2026-97259: acceso a datos de otros usuarios (IDOR) en Pay with Vipps and MobilePay for WooCommerce

CVE-2026-97259

T−46d 30 sept. 2026
9,8 Crít.

CVE-2026-94389: inyección de código en AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

CVE-2026-94389

T−46d 30 sept. 2026
7,2 Alta

CVE-2026-94081: cross-site scripting (XSS) en Persistent Login

CVE-2026-94081

T−46d 30 sept. 2026
7,2 Alta

CVE-2026-100507: cross-site scripting (XSS) en If-So Dynamic Content – Elementor & All Page Builders Personalization

CVE-2026-100507

T−46d 30 sept. 2026
6,4 Media

CVE-2026-102386: cross-site scripting (XSS) en WP Photo Album Plus

CVE-2026-102386

T−46d 30 sept. 2026
7,2 Alta

CVE-2026-102396: cross-site scripting (XSS) en Ultimate Maps by Supsystic – OpenStreetMap, Leaflet & Mapbox, No API Key

CVE-2026-102396

T−46d 30 sept. 2026
7,2 Alta

CVE-2026-102398: cross-site scripting (XSS) en CES – Popup Builder, Optin Forms, Lead Generation, CRM & Email Marketing Automation

CVE-2026-102398

T−46d 30 sept. 2026
7,2 Alta

CVE-2026-102395: cross-site scripting (XSS) en Easy Google Maps by Supsystic – Custom Markers, Clustering & Map Themes

CVE-2026-102395

T−46d 30 sept. 2026
7,2 Alta

CVE-2026-97289: cross-site scripting (XSS) en Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker

CVE-2026-97289

T−46d 30 sept. 2026
7,2 Alta

CVE-2026-97272: cross-site scripting (XSS) en Premmerce Permalink Manager for WooCommerce

CVE-2026-97272

T−46d 30 sept. 2026
6,4 Media

CVE-2026-97270: cross-site scripting (XSS) en CMB2

CVE-2026-97270

T−46d 30 sept. 2026
6,4 Media

CVE-2026-62084: cross-site scripting (XSS) en User Submitted Posts – Enable Users to Submit Posts from the Front End

CVE-2026-62084

T−46d 30 sept. 2026
4,3 Media

CVE-2026-62081: acceso a datos de otros usuarios (IDOR) en Flexible PDF Coupons – Gift Cards & Vouchers for WooCommerce

CVE-2026-62081

T−46d 30 sept. 2026
6,4 Media

CVE-2026-62078: cross-site scripting (XSS) en Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates

CVE-2026-62078

T−46d 30 sept. 2026
5,3 Media

CVE-2026-97317: exposición de información sensible en Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers

CVE-2026-97317

T−46d 30 sept. 2026
4,3 Media

CVE-2026-97219: vulnerabilidad en MStore API – Create Native Android & iOS Apps On The Cloud

CVE-2026-97219

T−46d 30 sept. 2026
4,7 Media

CVE-2026-97318: redirección abierta en Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers

CVE-2026-97318

T−46d 30 sept. 2026
6,4 Media

CVE-2026-97286: cross-site scripting (XSS) en Strong Testimonials

CVE-2026-97286

T−46d 30 sept. 2026
6,4 Media

CVE-2026-97279: cross-site scripting (XSS) en Polylang

CVE-2026-97279

T−46d 30 sept. 2026
4,3 Media

CVE-2026-102399: falsificación de peticiones (CSRF) en Photo Gallery by Supsystic – Image Gallery, Masonry, Albums & Lightbox

CVE-2026-102399

T−46d 30 sept. 2026
4,9 Media

CVE-2026-62097: inyección SQL en Business Directory Plugin – Easy Listing & Member Directories for WordPress

CVE-2026-62097

T−46d 30 sept. 2026
6,5 Media

CVE-2026-94298: inyección SQL en BuildKit – Product Builder for WooCommerce – Custom PC Builder

CVE-2026-94298

T−46d 30 sept. 2026
5,4 Media

CVE-2026-12241: cross-site scripting (XSS) en Advanced Woo Labels – Product Labels & Badges for WooCommerce

CVE-2026-12241

T−46d 30 sept. 2026
4,9 Media

CVE-2026-62085: inyección SQL en WP Activity Log

CVE-2026-62085

T−46d 30 sept. 2026
7,5 Alta

CVE-2026-100508: consumo de recursos sin control en Two Factor

CVE-2026-100508

T−46d 30 sept. 2026
5,3 Media

CVE-2026-97302: exposición de información sensible en MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO

CVE-2026-97302

T−46d 30 sept. 2026
4,9 Media

CVE-2026-120563: inyección SQL en WPML Multilingual & Multicurrency for WooCommerce

CVE-2026-120563

T−46d 30 sept. 2026
6,4 Media

CVE-2026-100513: cross-site scripting (XSS) en CF7 Views – Complete Entry Management for Contact Form 7

CVE-2026-100513

T−46d 30 sept. 2026
6,4 Media

Cross-site scripting (XSS) en Virtue Premium

T−46d 30 sept. 2026