[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

Tecnología Gravedad Sólo las que se están explotando

6,5 Media

CVE-2026-114189: inyección SQL en Dynific Addons for Elementor (formerly Anywhere Elementor)

CVE-2026-114189

T−8d 6 nov. 2026
7,3 Alta

CVE-2026-109900: gestión incorrecta de privilegios en Melapress Role Editor

CVE-2026-109900

T−8d 6 nov. 2026
5,3 Media

CVE-2026-120858: falta de autorización en Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

CVE-2026-120858

T−8d 6 nov. 2026
6,4 Media

CVE-2026-114188: cross-site scripting (XSS) en Dynific Addons for Elementor (formerly Anywhere Elementor)

CVE-2026-114188

T−8d 6 nov. 2026
4,3 Media

CVE-2026-109899: falta de autorización en Melapress Role Editor

CVE-2026-109899

T−8d 6 nov. 2026
6,1 Media

CVE-2026-121516: cross-site scripting (XSS) en QODE Wishlist for WooCommerce

CVE-2026-121516

T−8d 6 nov. 2026
9,8 Crít.

CVE-2026-19803: inyección de código en Printcart Store – Web to Print Product Designer for WooCommerce

CVE-2026-19803

T−8d 6 nov. 2026
6,5 Media

CVE-2026-120560: recorrido de rutas (path traversal) en Active Woot Products Tables for WooCommerce. 100% FREE

CVE-2026-120560

T−8d 6 nov. 2026
7,2 Alta

CVE-2026-119158: cross-site scripting (XSS) en Pie Register – User Registration, Profiles & Content Restriction

CVE-2026-119158

T−8d 6 nov. 2026
7,2 Alta

CVE-2026-120739: cross-site scripting (XSS) en Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization

CVE-2026-120739

T−8d 6 nov. 2026
7,2 Alta

CVE-2026-120677: cross-site scripting (XSS) en Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization

CVE-2026-120677

T−8d 6 nov. 2026
7,2 Alta

CVE-2026-119070: cross-site scripting (XSS) en Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization

CVE-2026-119070

T−8d 6 nov. 2026
9,8 Crít.

CVE-2026-93754: subida de ficheros peligrosos en payever Checkout – Composable Payment Gateway

CVE-2026-93754

T−8d 6 nov. 2026
5,9 Media

CVE-2026-119616: inclusión de ficheros en PHP en Noptin – Newsletter, New Post Notifications & Email Automation

CVE-2026-119616

T−8d 6 nov. 2026
7,2 Alta

CVE-2026-119175: cross-site scripting (XSS) en Flying Images: Optimize and Lazy Load Images for Faster Page Speed

CVE-2026-119175

T−8d 6 nov. 2026
6,4 Media

CVE-2026-116562: cross-site scripting (XSS) en Motors – Car Dealership & Classified Listings Plugin

CVE-2026-116562

T−8d 6 nov. 2026
6,4 Media

CVE-2026-118054: cross-site scripting (XSS) en LearnPress – Course Review

CVE-2026-118054

T−8d 6 nov. 2026
6,4 Media

CVE-2026-119098: cross-site scripting (XSS) en LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes

CVE-2026-119098

T−8d 6 nov. 2026
5,4 Media

CVE-2026-120741: cross-site scripting (XSS) en MotoPress Appointment Booking

CVE-2026-120741

T−8d 6 nov. 2026
5,4 Media

CVE-2026-119152: cross-site scripting (XSS) en Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress

CVE-2026-119152

T−8d 6 nov. 2026
5,3 Media

CVE-2026-120555: falta de autorización en Jupiter X Core

CVE-2026-120555

T−8d 6 nov. 2026
6,4 Media

CVE-2026-115816: cross-site scripting (XSS) en Kubio AI Page Builder

CVE-2026-115816

T−8d 6 nov. 2026
6,4 Media

CVE-2026-119165: cross-site scripting (XSS) en WPBakery Page Builder

CVE-2026-119165

T−8d 6 nov. 2026
5,9 Media

CVE-2026-120737: falta de autorización en Jupiter X Core

CVE-2026-120737

T−8d 6 nov. 2026
5,4 Media

CVE-2026-119219: cross-site scripting (XSS) en Jupiter X Core

CVE-2026-119219

T−8d 6 nov. 2026
6,4 Media

CVE-2026-118046: cross-site scripting (XSS) en JS Help Desk – AI-Powered Support & Ticketing System

CVE-2026-118046

T−8d 6 nov. 2026
7,2 Alta

CVE-2026-120540: cross-site scripting (XSS) en iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more

CVE-2026-120540

T−8d 6 nov. 2026
8,8 Alta

CVE-2026-104913: subida de ficheros peligrosos en Interactive Real Estate – Floor Plan & Building Visualizer

CVE-2026-104913

T−8d 6 nov. 2026
5,4 Media

CVE-2026-119218: cross-site scripting (XSS) en Greenshift – animation and page builder blocks

CVE-2026-119218

T−8d 6 nov. 2026
6,4 Media

CVE-2026-121519: cross-site scripting (XSS) en Social Slider Feed – Social Media Feed & Gallery Widgets

CVE-2026-121519

T−8d 6 nov. 2026