Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 5,3 Media

    CVE-2026-86837: acceso a datos de otros usuarios (IDOR) en Online Scheduling and Appointment Booking System – Bookly

    CVE-2026-86837

    T−51d 25 sept. 2026

  2. 7,5 Alta

    CVE-2026-86841: deserialización de datos no fiables en Online Scheduling and Appointment Booking System – Bookly

    CVE-2026-86841

    T−51d 25 sept. 2026

  3. 6,4 Media

    CVE-2026-85002: cross-site scripting (XSS) en EmbedPress

    CVE-2026-85002

    T−51d 25 sept. 2026

  4. 7,5 Alta

    CVE-2026-94177: inyección SQL en GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI

    CVE-2026-94177

    T−51d 25 sept. 2026

  5. 7,5 Alta

    CVE-2026-93000: inyección SQL en SPS-Suite

    CVE-2026-93000

    T−51d 25 sept. 2026

  6. 4,3 Media

    CVE-2026-88828: vulnerabilidad en Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification

    CVE-2026-88828

    T−51d 25 sept. 2026

  7. 6,4 Media

    CVE-2026-96899: cross-site scripting (XSS) en Optima Express IDX

    CVE-2026-96899

    T−51d 25 sept. 2026

  8. 7,2 Alta

    CVE-2026-86609: cross-site scripting (XSS) en Download Manager

    CVE-2026-86609

    T−51d 25 sept. 2026

  9. 6,3 Media

    CVE-2026-89001: gestión incorrecta de privilegios en WPeMatico RSS Feed Fetcher

    CVE-2026-89001

    T−51d 25 sept. 2026

  10. 7,5 Alta

    CVE-2026-93621: inyección SQL en WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps

    CVE-2026-93621

    T−51d 25 sept. 2026

  11. 5,3 Media

    CVE-2026-96897: falta de autorización en Optima Express IDX

    CVE-2026-96897

    T−51d 25 sept. 2026

  12. 5,3 Media

    CVE-2026-89300: falta de autorización en WP Verify API

    CVE-2026-89300

    T−51d 25 sept. 2026

  13. — Baja

    CVE-2026-57232: falsificación de peticiones del servidor (SSRF) en contao/contao y contao/core-bundle

    CVE-2026-57232 · GHSA-87MG-5GRR-RHWH

    T−51d 24 sept. 2026

  14. — Alta

    CVE-2026-61815: vulnerabilidad en zbateson/mail-mime-parser

    CVE-2026-61815 · GHSA-36H5-QG4P-Q2QF

    T−51d 24 sept. 2026

  15. — Alta

    CVE-2026-61816: consumo de recursos sin control en zbateson/mail-mime-parser

    CVE-2026-61816 · GHSA-F6V3-2QMR-VFJX

    T−51d 24 sept. 2026

  16. — Alta

    CVE-2026-56738: inyección SQL en phpmyfaq/phpmyfaq y thorsten/phpmyfaq

    CVE-2026-56738 · GHSA-RW77-VQ4G-X3HP

    T−51d 24 sept. 2026

  17. — Alta

    CVE-2026-56737: autenticación incorrecta en thorsten/phpmyfaq y phpmyfaq/phpmyfaq

    CVE-2026-56737 · GHSA-8GPW-XVPF-HVX5

    T−51d 24 sept. 2026

  18. — Alta

    CVE-2026-56736: cross-site scripting (XSS) en thorsten/phpmyfaq y phpmyfaq/phpmyfaq

    CVE-2026-56736 · GHSA-PGWP-VC7Q-CVJ3

    T−51d 24 sept. 2026

  19. 7,2 Alta

    CVE-2026-96752: cross-site scripting (XSS) en Zero Spam for WordPress

    CVE-2026-96752

    T−51d 24 sept. 2026

  20. 6,4 Media

    CVE-2026-93747: cross-site scripting (XSS) en wpForo Forum

    CVE-2026-93747

    T−51d 24 sept. 2026

  21. 6,1 Media

    CVE-2026-88996: cross-site scripting (XSS) en WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More

    CVE-2026-88996

    T−51d 24 sept. 2026

  22. 7,2 Alta

    CVE-2026-93654: cross-site scripting (XSS) en Premium Packages – Sell Digital Products Securely

    CVE-2026-93654

    T−51d 24 sept. 2026

  23. 6,4 Media

    CVE-2026-13179: cross-site scripting (XSS) en WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings

    CVE-2026-13179

    T−51d 24 sept. 2026

  24. 7,5 Alta

    CVE-2026-13456: inclusión de ficheros en PHP en WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings

    CVE-2026-13456

    T−51d 24 sept. 2026

  25. 5,5 Media

    CVE-2026-12037: falsificación de peticiones del servidor (SSRF) en Asset CleanUp: Page Speed Booster

    CVE-2026-12037

    T−51d 24 sept. 2026

  26. 7,2 Alta

    CVE-2026-95864: cross-site scripting (XSS) en Themify Builder

    CVE-2026-95864

    T−51d 24 sept. 2026

  27. 4,9 Media

    CVE-2026-17602: recorrido de rutas (path traversal) en SSL Zen — SSL Certificate Installer & HTTPS Redirects

    CVE-2026-17602

    T−51d 24 sept. 2026

  28. 6,1 Media

    CVE-2026-17577: cross-site scripting (XSS) en SSL Zen — SSL Certificate Installer & HTTPS Redirects

    CVE-2026-17577

    T−51d 24 sept. 2026

  29. 8,8 Alta

    CVE-2026-19804: inyección de código en s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions

    CVE-2026-19804

    T−51d 24 sept. 2026

  30. 7,2 Alta

    CVE-2026-94573: cross-site scripting (XSS) en Repeater Fields for Elementor Forms

    CVE-2026-94573

    T−51d 24 sept. 2026