Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.303expedientes con estos filtros

Filtros

  1. 7,2 Alta

    CVE-2026-80072: redirección abierta en User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

    CVE-2026-80072

    T−65d 11 sept. 2026

  2. 5,3 Media

    CVE-2026-62088: exposición de información sensible en ElasticPress

    CVE-2026-62088

    T−65d 11 sept. 2026

  3. 8,8 Alta

    CVE-2026-15451: gestión incorrecta de privilegios en MemberPress Corporate Accounts

    CVE-2026-15451

    T−65d 11 sept. 2026

  4. 4,3 Media

    CVE-2026-88764: falta de autorización en Simple Membership

    CVE-2026-88764

    T−65d 11 sept. 2026

  5. 5,3 Media

    CVE-2026-77773: exposición de información sensible en Contact Form to Chat Apps | Click to Chat to Order – FormyChat

    CVE-2026-77773

    T−65d 11 sept. 2026

  6. 4,9 Media

    CVE-2026-62109: inyección SQL en Sky Addons for Elementor – 160+ Widgets, GSAP Animations, Templates & Theme Builder

    CVE-2026-62109

    T−65d 11 sept. 2026

  7. 5,3 Media

    CVE-2026-88802: falta de autorización en MDJM Event Management y Mobile Events Manager

    CVE-2026-88802

    T−65d 11 sept. 2026

  8. 5,3 Media

    CVE-2026-62137: exposición de información sensible en bbPress

    CVE-2026-62137

    T−65d 11 sept. 2026

  9. 4,3 Media

    CVE-2026-62089: falta de autorización en Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

    CVE-2026-62089

    T−65d 11 sept. 2026

  10. 4,3 Media

    CVE-2024-12145: falta de autorización en BuddyPress

    CVE-2024-12145

    T−65d 10 sept. 2026

  11. 7,2 Alta

    CVE-2026-17037: cross-site scripting (XSS) en Kirki – Freeform Page Builder, Website Builder & Customizer

    CVE-2026-17037

    T−65d 10 sept. 2026

  12. — Alta

    CVE-2026-55416: inyección SQL en pimcore/pimcore

    CVE-2026-55416 · GHSA-23RH-XW42-FQ82

    T−65d 10 sept. 2026

  13. 5,3 Media

    CVE-2026-11446: falta de autorización en Booktics – Appointment Booking Calendar for Service Businesses

    CVE-2026-11446

    T−66d 10 sept. 2026

  14. 6,1 Media

    CVE-2026-18562: cross-site scripting (XSS) en HUSKY – Products Filter for WooCommerce Professional. MCP is onboard

    CVE-2026-18562

    T−66d 10 sept. 2026

  15. 6,1 Media

    CVE-2026-77150: cross-site scripting (XSS) en Unlimited Elements for Elementor

    CVE-2026-77150

    T−66d 10 sept. 2026

  16. 6,1 Media

    CVE-2026-84960: cross-site scripting (XSS) en WP-Members Membership Plugin

    CVE-2026-84960

    T−66d 10 sept. 2026

  17. 6,1 Media

    CVE-2026-78172: cross-site scripting (XSS) en Themify – WooCommerce Product Filter

    CVE-2026-78172

    T−66d 10 sept. 2026

  18. 7,2 Alta

    CVE-2026-81754: cross-site scripting (XSS) en Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner…

    CVE-2026-81754

    T−66d 10 sept. 2026

  19. 7,2 Alta

    CVE-2026-81825: cross-site scripting (XSS) en Simple Ajax Chat – Add a Fast, Secure Chat Box

    CVE-2026-81825

    T−66d 10 sept. 2026

  20. 7,2 Alta

    CVE-2026-18579: cross-site scripting (XSS) en WP Photo Album Plus

    CVE-2026-18579

    T−66d 10 sept. 2026

  21. 7,5 Alta

    CVE-2026-18561: inyección SQL en Unlimited Elements for Elementor

    CVE-2026-18561

    T−66d 10 sept. 2026

  22. 7,5 Alta

    CVE-2026-15462: inyección SQL en Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons

    CVE-2026-15462

    T−66d 10 sept. 2026

  23. 6,1 Media

    CVE-2026-18964: cross-site scripting (XSS) en Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty

    CVE-2026-18964

    T−66d 10 sept. 2026

  24. 6,1 Media

    CVE-2026-19985: cross-site scripting (XSS) en Relevanssi – A Better Search

    CVE-2026-19985

    T−66d 10 sept. 2026

  25. 8,1 Alta

    CVE-2026-19991: recorrido de rutas (path traversal) en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2026-19991

    T−66d 10 sept. 2026

  26. 5,3 Media

    CVE-2026-12215: subida de ficheros peligrosos en OTP Login & Register Woocommerce

    CVE-2026-12215

    T−66d 10 sept. 2026

  27. 6,5 Media

    CVE-2026-11496: falta de autorización en PDF Builder for WooCommerce. Create invoices,packing slips and more

    CVE-2026-11496

    T−66d 10 sept. 2026

  28. 6,5 Media

    CVE-2026-15439: inyección SQL en GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI

    CVE-2026-15439

    T−66d 10 sept. 2026

  29. 6,4 Media

    CVE-2026-7438: cross-site scripting (XSS) en Bold Timeline Lite

    CVE-2026-7438

    T−66d 10 sept. 2026

  30. 7,5 Alta

    CVE-2026-77807: recorrido de rutas (path traversal) en AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

    CVE-2026-77807

    T−66d 10 sept. 2026