Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 4,4 Media

    CVE-2026-82127: cross-site scripting (XSS) en Schema & Structured Data for WP & AMP

    CVE-2026-82127

    T−48d 28 sept. 2026

  2. 5,3 Media

    CVE-2026-94120: falta de autorización en GravityExport Lite for Gravity Forms

    CVE-2026-94120

    T−48d 28 sept. 2026

  3. 5,3 Media

    CVE-2026-86789: exposición de información sensible en Connections Business Directory

    CVE-2026-86789

    T−48d 28 sept. 2026

  4. 7,5 Alta

    CVE-2026-96831: deserialización de datos no fiables en Themify Builder

    CVE-2026-96831

    T−48d 28 sept. 2026

  5. 5,3 Media

    CVE-2026-80333: exposición de información sensible en Solace Extra

    CVE-2026-80333

    T−48d 28 sept. 2026

  6. 7,3 Alta

    CVE-2026-75823: gestión incorrecta de privilegios en User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

    CVE-2026-75823

    T−48d 28 sept. 2026

  7. 4,3 Media

    CVE-2026-88797: falta de autorización en Vayu X

    CVE-2026-88797

    T−48d 28 sept. 2026

  8. 5,3 Media

    CVE-2026-96342: exposición de información sensible en WPMobile.App – Android and iOS App Builder

    CVE-2026-96342

    T−48d 28 sept. 2026

  9. 6,3 Media

    CVE-2026-96821: gestión incorrecta de privilegios en FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration

    CVE-2026-96821

    T−48d 28 sept. 2026

  10. 6,4 Media

    CVE-2026-87777: cross-site scripting (XSS) en Hostinger Reach – AI-Powered Email Marketing for WordPress

    CVE-2026-87777

    T−48d 28 sept. 2026

  11. 6,4 Media

    CVE-2026-85415: cross-site scripting (XSS) en Audio Player Block – Advanced Block for Embedding Audio Files

    CVE-2026-85415

    T−48d 28 sept. 2026

  12. 7,2 Alta

    CVE-2026-96816: cross-site scripting (XSS) en Trusted Shops Easy Integration for WooCommerce

    CVE-2026-96816

    T−48d 28 sept. 2026

  13. 4,7 Media

    CVE-2026-88791: redirección abierta en Safe Redirect Manager

    CVE-2026-88791

    T−48d 28 sept. 2026

  14. 6,3 Media

    CVE-2026-96815: gestión incorrecta de privilegios en Vitepos – Point of Sale (POS) for WooCommerce

    CVE-2026-96815

    T−48d 28 sept. 2026

  15. 4,3 Media

    CVE-2026-79618: vulnerabilidad en User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

    CVE-2026-79618

    T−48d 28 sept. 2026

  16. 4,3 Media

    CVE-2026-90953: exposición de información sensible en Image Optimizer

    CVE-2026-90953

    T−48d 28 sept. 2026

  17. 7,5 Alta

    CVE-2026-93651: deserialización de datos no fiables en Minimum and Maximum Quantity for WooCommerce

    CVE-2026-93651

    T−48d 28 sept. 2026

  18. 7,2 Alta

    CVE-2026-97316: falsificación de peticiones del servidor (SSRF) en Broken Link Notifier

    CVE-2026-97316

    T−48d 28 sept. 2026

  19. 5,3 Media

    CVE-2026-90952: vulnerabilidad en WPEPP – All In One WordPress Security, Firewall, Malware Scanner & Login Protection

    CVE-2026-90952

    T−48d 28 sept. 2026

  20. 4,3 Media

    CVE-2026-94297: falta de autorización en Media Library Organizer – Folders, File Manager & Media Categories

    CVE-2026-94297

    T−48d 28 sept. 2026

  21. 7,5 Alta

    CVE-2026-96343: deserialización de datos no fiables en ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce

    CVE-2026-96343

    T−48d 28 sept. 2026

  22. 4,7 Media

    CVE-2026-1661: validación de entrada incorrecta en WP Mail Logging

    CVE-2026-1661

    T−48d 28 sept. 2026

  23. 6,1 Media

    CVE-2026-91832: cross-site scripting (XSS) en WP Mobile Menu – The Mobile-Friendly Responsive Menu

    CVE-2026-91832

    T−48d 28 sept. 2026

  24. 5,3 Media

    CVE-2026-91020: vulnerabilidad en WebToffee Gift Cards for WooCommerce

    CVE-2026-91020

    T−48d 28 sept. 2026

  25. 7,5 Alta

    CVE-2026-91051: deserialización de datos no fiables en EWWW Image Optimizer

    CVE-2026-91051

    T−48d 28 sept. 2026

  26. 7,2 Alta

    CVE-2026-89193: cross-site scripting (XSS) en Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF

    CVE-2026-89193

    T−48d 28 sept. 2026

  27. 7,2 Alta

    CVE-2026-85573: cross-site scripting (XSS) en All in One Files Upload for WooCommerce

    CVE-2026-85573

    T−48d 28 sept. 2026

  28. 5,3 Media

    CVE-2026-97249: vulnerabilidad en Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction

    CVE-2026-97249

    T−48d 28 sept. 2026

  29. 7,2 Alta

    CVE-2026-93514: cross-site scripting (XSS) en Notification for Telegram

    CVE-2026-93514

    T−48d 28 sept. 2026

  30. 6,4 Media

    CVE-2026-92424: cross-site scripting (XSS) en Content Egg – Affiliate Product Importer & Price Comparison

    CVE-2026-92424

    T−48d 28 sept. 2026