Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.303expedientes con estos filtros

Filtros

  1. 7,2 Alta

    CVE-2026-88792: cross-site scripting (XSS) en Dictionary

    CVE-2026-88792

    T−61d 15 sept. 2026

  2. 7,2 Alta

    CVE-2026-86801: cross-site scripting (XSS) en To Do List Member

    CVE-2026-86801

    T−61d 15 sept. 2026

  3. 6,4 Media

    CVE-2026-18063: cross-site scripting (XSS) en Job Postings

    CVE-2026-18063

    T−61d 14 sept. 2026

  4. 7,2 Alta

    CVE-2026-90986: cross-site scripting (XSS) en Visitor Traffic Real Time Statistics pro

    CVE-2026-90986

    T−62d 14 sept. 2026

  5. 7,2 Alta

    CVE-2026-90887: cross-site scripting (XSS) en WP Inventory Manager

    CVE-2026-90887

    T−62d 14 sept. 2026

  6. — Baja

    CVE-2026-100909: validación de entrada incorrecta en october/october

    CVE-2026-100909 · GHSA-2XMM-M4WV-3FJH

    T−62d 14 sept. 2026

  7. 7,5 Alta

    CVE-2026-75983: gestión incorrecta de privilegios en Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce

    CVE-2026-75983

    T−62d 14 sept. 2026

  8. 6,4 Media

    CVE-2026-15402: cross-site scripting (XSS) en Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce

    CVE-2026-15402

    T−62d 14 sept. 2026

  9. 6,5 Media

    CVE-2026-89141: acceso a datos de otros usuarios (IDOR) en AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini

    CVE-2026-89141

    T−62d 14 sept. 2026

  10. — Baja

    CVE-2026-49400: deserialización de datos no fiables en october/system

    CVE-2026-49400 · GHSA-2FF2-MX52-Q8WP

    T−62d 14 sept. 2026

  11. 5,3 Media

    CVE-2026-15758: exposición de información sensible en 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

    CVE-2026-15758

    T−62d 14 sept. 2026

  12. — Baja

    CVE-2026-46696: gestión incorrecta de privilegios en october/system

    CVE-2026-46696 · GHSA-XV9M-FM3W-8W5X

    T−62d 14 sept. 2026

  13. 5,4 Media

    CVE-2026-85657: cross-site scripting (XSS) en Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors

    CVE-2026-85657

    T−62d 14 sept. 2026

  14. 6,4 Media

    CVE-2026-85575: cross-site scripting (XSS) en ShopEngine – All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets

    CVE-2026-85575

    T−62d 14 sept. 2026

  15. 4,3 Media

    CVE-2026-82519: falta de autorización en Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

    CVE-2026-82519

    T−62d 14 sept. 2026

  16. 4,3 Media

    CVE-2026-74926: falta de autorización en MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions

    CVE-2026-74926

    T−62d 14 sept. 2026

  17. 7,3 Alta

    CVE-2026-85530: gestión incorrecta de privilegios en GiveWP – Donation Plugin and Fundraising Platform

    CVE-2026-85530

    T−62d 14 sept. 2026

  18. 4,9 Media

    CVE-2026-76553: vulnerabilidad en WP Import Export Lite

    CVE-2026-76553

    T−62d 14 sept. 2026

  19. 7,5 Alta

    CVE-2026-78472: inyección SQL en Ni WooCommerce Sales Report – Orders, Revenue & Sales Analytics Dashboard

    CVE-2026-78472

    T−62d 14 sept. 2026

  20. 5,4 Media

    CVE-2026-86823: redirección abierta en Newsletter

    CVE-2026-86823

    T−62d 14 sept. 2026

  21. 4,3 Media

    CVE-2026-87959: falta de autorización en WPBot – AI ChatBot for WordPress & Growth Suite: SEO, AI Writer, Email Marketing, Social Media

    CVE-2026-87959

    T−62d 14 sept. 2026

  22. 4,3 Media

    CVE-2026-85572: exposición de información sensible en Tutor LMS – eLearning and online course solution

    CVE-2026-85572

    T−62d 14 sept. 2026

  23. 4,3 Media

    CVE-2026-85569: vulnerabilidad en Tutor LMS – eLearning and online course solution

    CVE-2026-85569

    T−62d 14 sept. 2026

  24. 4,3 Media

    CVE-2026-89328: falta de autorización en FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration

    CVE-2026-89328

    T−62d 14 sept. 2026

  25. 4,3 Media

    CVE-2026-89327: vulnerabilidad en FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration

    CVE-2026-89327

    T−62d 14 sept. 2026

  26. 5,3 Media

    CVE-2026-84907: falta de autorización en Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce

    CVE-2026-84907

    T−62d 14 sept. 2026

  27. 7,2 Alta

    CVE-2026-76551: inyección de código en WP Import Export Lite

    CVE-2026-76551

    T−62d 14 sept. 2026

  28. 7,5 Alta

    CVE-2026-80491: inyección SQL en SAMO Forms

    CVE-2026-80491

    T−62d 14 sept. 2026

  29. 4,3 Media

    CVE-2026-85349: exposición de información sensible en FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration

    CVE-2026-85349

    T−62d 14 sept. 2026

  30. 5,3 Media

    CVE-2026-84906: vulnerabilidad en Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce

    CVE-2026-84906

    T−62d 14 sept. 2026