Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.303expedientes con estos filtros

Filtros

  1. 6,4 Media

    CVE-2026-19945: cross-site scripting (XSS) en WP Crowdfunding

    CVE-2026-19945

    T−68d 8 sept. 2026

  2. 4,9 Media

    CVE-2026-19944: inyección SQL en WP Crowdfunding

    CVE-2026-19944

    T−68d 8 sept. 2026

  3. 6,1 Media

    CVE-2026-19797: cross-site scripting (XSS) en User Access Manager

    CVE-2026-19797

    T−68d 8 sept. 2026

  4. 7,2 Alta

    CVE-2026-17553: gestión incorrecta de privilegios en WP EasyCart: Shopping Cart and eCommerce Store

    CVE-2026-17553

    T−68d 8 sept. 2026

  5. 6,1 Media

    CVE-2026-7804: cross-site scripting (XSS) en Product Filter for WooCommerce by WBW

    CVE-2026-7804

    T−68d 8 sept. 2026

  6. 6,4 Media

    CVE-2026-75966: cross-site scripting (XSS) en Podlove Podcast Publisher

    CVE-2026-75966

    T−68d 8 sept. 2026

  7. 4,9 Media

    CVE-2026-19800: inyección SQL en Mail Mint – Email Marketing, Automation & WooCommerce Emails with AI Assistance

    CVE-2026-19800

    T−68d 8 sept. 2026

  8. 6,6 Media

    CVE-2026-11363: deserialización de datos no fiables en Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder

    CVE-2026-11363

    T−68d 8 sept. 2026

  9. 6,4 Media

    CVE-2026-77186: cross-site scripting (XSS) en My Calendar – Accessible Event Manager

    CVE-2026-77186

    T−68d 8 sept. 2026

  10. 6,4 Media

    CVE-2026-77187: cross-site scripting (XSS) en My Calendar – Accessible Event Manager

    CVE-2026-77187

    T−68d 8 sept. 2026

  11. 8,8 Alta

    CVE-2026-76801: gestión incorrecta de privilegios en FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment

    CVE-2026-76801

    T−68d 8 sept. 2026

  12. 7,5 Alta

    CVE-2026-15667: inclusión de ficheros en PHP en Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce

    CVE-2026-15667

    T−68d 8 sept. 2026

  13. 7,5 Alta

    CVE-2026-15406: inclusión de ficheros en PHP en Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce

    CVE-2026-15406

    T−68d 8 sept. 2026

  14. 7,2 Alta

    CVE-2026-13359: cross-site scripting (XSS) en Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress

    CVE-2026-13359

    T−68d 8 sept. 2026

  15. 4,3 Media

    CVE-2026-81788: falta de autorización en IMPress for IDX Broker

    CVE-2026-81788

    T−68d 8 sept. 2026

  16. 5,3 Media

    CVE-2026-75793: falta de autorización en SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments

    CVE-2026-75793

    T−68d 8 sept. 2026

  17. 7,2 Alta

    Cross-site scripting (XSS) en Jetpack – AI Agents & MCP, Security, Backup & Analytics

    T−68d 8 sept. 2026

  18. 5,3 Media

    CVE-2026-81799: falta de autorización en Return Refund and Exchange For WooCommerce

    CVE-2026-81799

    T−68d 8 sept. 2026

  19. 6,1 Media

    CVE-2026-66632: inyección de código en Simple CAPTCHA with Cloudflare Turnstile

    CVE-2026-66632

    T−68d 8 sept. 2026

  20. 6,4 Media

    CVE-2026-83546: cross-site scripting (XSS) en CoolClock

    CVE-2026-83546

    T−68d 8 sept. 2026

  21. 8,1 Alta

    CVE-2026-81784: deserialización de datos no fiables en Wise Chat

    CVE-2026-81784

    T−68d 8 sept. 2026

  22. 5,3 Media

    CVE-2026-19436: vulnerabilidad en Ultimate Gift Cards for WooCommerce

    CVE-2026-19436

    T−68d 8 sept. 2026

  23. 6,4 Media

    CVE-2026-13709: cross-site scripting (XSS) en Graphina – Charts and Graphs For Elementor

    CVE-2026-13709

    T−68d 8 sept. 2026

  24. 7,2 Alta

    CVE-2026-84219: cross-site scripting (XSS) en Kirki – Freeform Page Builder, Website Builder & Customizer

    CVE-2026-84219

    T−68d 8 sept. 2026

  25. 7,2 Alta

    CVE-2026-81795: cross-site scripting (XSS) en Page Visits Counter – Lite

    CVE-2026-81795

    T−68d 8 sept. 2026

  26. 4,3 Media

    CVE-2026-81801: falta de autorización en WP-Stateless – Google Cloud Storage

    CVE-2026-81801

    T−68d 8 sept. 2026

  27. 5,3 Media

    CVE-2026-77771: autenticación incorrecta en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

    CVE-2026-77771

    T−68d 8 sept. 2026

  28. 6,5 Media

    CVE-2026-81275: recorrido de rutas (path traversal) en Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress

    CVE-2026-81275

    T−68d 8 sept. 2026

  29. 5,3 Media

    CVE-2026-66674: vulnerabilidad en Simple CAPTCHA with Cloudflare Turnstile

    CVE-2026-66674

    T−68d 8 sept. 2026

  30. 7,2 Alta

    CVE-2026-84819: cross-site scripting (XSS) en WPAdverts – Classifieds Plugin

    CVE-2026-84819

    T−68d 8 sept. 2026