[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.303expedientes con estos filtros

Filtros

Tecnología Gravedad Sólo las que se están explotando

6,4 Media

CVE-2026-83547: cross-site scripting (XSS) en Xpro Addons — 150+ Widgets for Elementor

CVE-2026-83547

T−75d 1 sept. 2026
8,1 Alta

CVE-2026-81772: deserialización de datos no fiables en Ninja Forms - Layout & Styles

CVE-2026-81772

T−75d 1 sept. 2026
7,5 Alta

CVE-2026-81286: inyección SQL en WCFM Marketplace – Multivendor Marketplace for WooCommerce

CVE-2026-81286

T−75d 1 sept. 2026
7,5 Alta

CVE-2026-81283: deserialización de datos no fiables en User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

CVE-2026-81283

T−75d 1 sept. 2026
7,2 Alta

CVE-2026-81288: cross-site scripting (XSS) en Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups.

CVE-2026-81288

T−75d 1 sept. 2026
7,2 Alta

CVE-2026-81289: cross-site scripting (XSS) en MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar

CVE-2026-81289

T−75d 1 sept. 2026
4,4 Media

CVE-2025-15692: cross-site scripting (XSS) en Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress

CVE-2025-15692

T−75d 1 sept. 2026
8,8 Alta

CVE-2026-77009: inyección de código en WatchMan-Site7

CVE-2026-77009

T−75d 1 sept. 2026
— Alta

CVE-2026-71415: falta de autorización en getkirby/cms

CVE-2026-71415 · GHSA-67MX-6WF2-92XP

T−75d 1 sept. 2026
— Alta

CVE-2026-75594: recorrido de rutas (path traversal) en getkirby/cms

CVE-2026-75594 · GHSA-9VX2-J98C-P72W

T−75d 1 sept. 2026
9,8 Crít.

CVE-2026-18550: gestión incorrecta de privilegios en Nokri – Job Board WordPress Theme

CVE-2026-18550

T−76d 31 ago. 2026
6,4 Media

CVE-2026-15101: cross-site scripting (XSS) en WPBakery Page Builder

CVE-2026-15101

T−76d 31 ago. 2026
7,2 Alta

CVE-2026-19914: cross-site scripting (XSS) en Welcart e-Commerce

CVE-2026-19914

T−76d 31 ago. 2026
6,4 Media

CVE-2026-16786: cross-site scripting (XSS) en Live Composer – Free WordPress Website Builder

CVE-2026-16786

T−76d 31 ago. 2026
6,4 Media

CVE-2026-16788: cross-site scripting (XSS) en Live Composer – Free WordPress Website Builder

CVE-2026-16788

T−76d 31 ago. 2026
— Alta

CVE-2026-81889: falsificación de peticiones del servidor (SSRF) en studio-42/elfinder

CVE-2026-81889 · GHSA-8X3Q-JPJH-QH5C

T−76d 31 ago. 2026
— Media

CVE-2026-15305: vulnerabilidad en typo3/cms-form

CVE-2026-15305 · GHSA-MFQJ-CQV3-H7XW

T−76d 31 ago. 2026
6,4 Media

CVE-2026-18488: cross-site scripting (XSS) en Blocksy Companion

CVE-2026-18488

T−76d 31 ago. 2026
6,1 Media

CVE-2026-75964: cross-site scripting (XSS) en User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

CVE-2026-75964

T−76d 31 ago. 2026
6,5 Media

CVE-2026-77189: inyección SQL en Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns)

CVE-2026-77189

T−76d 31 ago. 2026
6,4 Media

CVE-2026-75980: cross-site scripting (XSS) en BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot

CVE-2026-75980

T−76d 31 ago. 2026
6,4 Media

CVE-2026-75965: cross-site scripting (XSS) en User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

CVE-2026-75965

T−76d 31 ago. 2026
8,8 Alta

CVE-2026-19806: autenticación incorrecta en Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System

CVE-2026-19806

T−76d 31 ago. 2026
4,9 Media

CVE-2026-17589: inyección SQL en WP EasyCart: Shopping Cart and eCommerce Store

CVE-2026-17589

T−76d 31 ago. 2026
5,3 Media

CVE-2026-19948: falta de autorización en Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox

CVE-2026-19948

T−76d 31 ago. 2026
7,2 Alta

CVE-2026-19573: cross-site scripting (XSS) en Affiliate Super Assistent

CVE-2026-19573

T−76d 31 ago. 2026
4,9 Media

CVE-2026-76006: inyección SQL en Photo Gallery by Ays – Responsive Image Gallery

CVE-2026-76006

T−76d 31 ago. 2026
6,5 Media

CVE-2026-18752: inyección SQL en Persistent Login

CVE-2026-18752

T−76d 31 ago. 2026
7,2 Alta

CVE-2026-75921: autorización incorrecta en Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

CVE-2026-75921

T−76d 31 ago. 2026
6,4 Media

CVE-2026-16787: cross-site scripting (XSS) en Live Composer – Free WordPress Website Builder

CVE-2026-16787

T−76d 31 ago. 2026