Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.303expedientes con estos filtros

Filtros

  1. 6,5 Media

    CVE-2026-84898: recorrido de rutas (path traversal) en Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce

    CVE-2026-84898

    T−71d 5 sept. 2026

  2. 4,3 Media

    CVE-2026-84745: exposición de información sensible en The Events Calendar

    CVE-2026-84745

    T−71d 5 sept. 2026

  3. 9,8 Crít.

    CVE-2024-11080: inyección de código en Post Grid

    CVE-2024-11080

    T−72d 4 sept. 2026

  4. 6,4 Media

    CVE-2026-76573: cross-site scripting (XSS) en Pods – Custom Content Types and Fields

    CVE-2026-76573

    T−72d 4 sept. 2026

  5. 6,4 Media

    CVE-2026-85414: cross-site scripting (XSS) en FooGallery Photo Gallery : Image, Video & Masonry Galleries

    CVE-2026-85414

    T−72d 4 sept. 2026

  6. 7,2 Alta

    CVE-2026-83625: cross-site scripting (XSS) en Contact Form by Supsystic – Drag & Drop Form Builder with Templates & Form Statistics

    CVE-2026-83625

    T−72d 4 sept. 2026

  7. 6,1 Media

    CVE-2026-75586: cross-site scripting (XSS) en Unlimited Elements for Elementor

    CVE-2026-75586

    T−72d 4 sept. 2026

  8. 6,5 Media

    CVE-2026-14975: recorrido de rutas (path traversal) en WP File Download

    CVE-2026-14975

    T−72d 4 sept. 2026

  9. 6,4 Media

    CVE-2026-3853: cross-site scripting (XSS) en Divi

    CVE-2026-3853

    T−72d 4 sept. 2026

  10. 5,0 Media

    CVE-2026-4361: falsificación de peticiones del servidor (SSRF) en Divi

    CVE-2026-4361

    T−72d 4 sept. 2026

  11. 7,2 Alta

    CVE-2026-18406: cross-site scripting (XSS) en SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz

    CVE-2026-18406

    T−72d 4 sept. 2026

  12. 7,2 Alta

    CVE-2026-16649: cross-site scripting (XSS) en Gravity Forms

    CVE-2026-16649

    T−72d 4 sept. 2026

  13. 7,2 Alta

    CVE-2026-77830: cross-site scripting (XSS) en Anti-Spam, Spam FireWall by CleanTalk

    CVE-2026-77830

    T−72d 4 sept. 2026

  14. 8,8 Alta

    CVE-2026-19887: deserialización de datos no fiables en Welcart e-Commerce

    CVE-2026-19887

    T−72d 4 sept. 2026

  15. 7,2 Alta

    CVE-2026-15984: cross-site scripting (XSS) en QuickCal

    CVE-2026-15984

    T−72d 4 sept. 2026

  16. 7,2 Alta

    CVE-2026-78438: cross-site scripting (XSS) en W3 Total Cache

    CVE-2026-78438

    T−72d 4 sept. 2026

  17. 7,2 Alta

    CVE-2026-19769: cross-site scripting (XSS) en Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder

    CVE-2026-19769

    T−72d 4 sept. 2026

  18. 6,1 Media

    CVE-2026-18843: cross-site scripting (XSS) en Beaver Builder Plugin (Starter Version)

    CVE-2026-18843

    T−72d 4 sept. 2026

  19. 7,2 Alta

    CVE-2026-77263: cross-site scripting (XSS) en iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more

    CVE-2026-77263

    T−72d 4 sept. 2026

  20. 7,2 Alta

    CVE-2026-77233: cross-site scripting (XSS) en iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more

    CVE-2026-77233

    T−72d 4 sept. 2026

  21. 9,8 Crít.

    CVE-2026-13447: autenticación incorrecta en MStore API – Create Native Android & iOS Apps On The Cloud

    CVE-2026-13447

    T−72d 4 sept. 2026

  22. 6,4 Media

    CVE-2026-8623: cross-site scripting (XSS) en DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer

    CVE-2026-8623

    T−72d 4 sept. 2026

  23. 4,3 Media

    CVE-2026-83628: falta de autorización en Theme My Login

    CVE-2026-83628

    T−72d 4 sept. 2026

  24. 6,4 Media

    CVE-2026-18404: cross-site scripting (XSS) en Social Chat – Click To Chat App Button

    CVE-2026-18404

    T−72d 4 sept. 2026

  25. 6,4 Media

    CVE-2026-8625: cross-site scripting (XSS) en DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer

    CVE-2026-8625

    T−72d 4 sept. 2026

  26. 4,3 Media

    CVE-2026-75018: falta de autorización en Custom Contact Forms

    CVE-2026-75018

    T−72d 4 sept. 2026

  27. 5,4 Media

    CVE-2025-14945: cross-site scripting (XSS) en Events Manager – Calendar, Bookings, Tickets, Appointments and more!

    CVE-2025-14945

    T−72d 4 sept. 2026

  28. 4,9 Media

    CVE-2026-82186: inyección SQL en WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode

    CVE-2026-82186

    T−72d 4 sept. 2026

  29. 6,4 Media

    CVE-2026-27086: cross-site scripting (XSS) en Woodmart

    CVE-2026-27086

    T−72d 4 sept. 2026

  30. 8,8 Alta

    CVE-2025-9049: falta de autorización en Nokri – Job Board WordPress Theme

    CVE-2025-9049

    T−72d 4 sept. 2026