[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.303expedientes con estos filtros

Filtros

Tecnología Gravedad Sólo las que se están explotando

7,3 Alta

CVE-2026-82225: autenticación incorrecta en RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login

CVE-2026-82225

T−79d 28 ago. 2026
5,3 Media

CVE-2026-82220: vulnerabilidad en Forminator Forms – Contact Form, Payment Form & Custom Form Builder

CVE-2026-82220

T−79d 28 ago. 2026
7,3 Alta

CVE-2026-19220: gestión incorrecta de privilegios en Forminator Forms – Contact Form, Payment Form & Custom Form Builder

CVE-2026-19220

T−79d 28 ago. 2026
7,2 Alta

CVE-2026-78333: cross-site scripting (XSS) en 12 Step Meeting List

CVE-2026-78333

T−79d 28 ago. 2026
5,3 Media

Exposición de información sensible en WP Rocket

T−79d 28 ago. 2026
4,3 Media

CVE-2026-81762: falta de autorización en Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment

CVE-2026-81762

T−79d 28 ago. 2026
5,3 Media

CVE-2026-14567: exposición de información sensible en User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

CVE-2026-14567

T−79d 28 ago. 2026
6,3 Media

CVE-2026-79996: gestión incorrecta de privilegios en User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

CVE-2026-79996

T−79d 28 ago. 2026
5,3 Media

CVE-2026-19715: exposición de información sensible en WP OAuth Server ( Login with WordPress )

CVE-2026-19715

T−79d 28 ago. 2026
7,2 Alta

CVE-2026-82229: cross-site scripting (XSS) en Social Login, Social Sharing by miniOrange

CVE-2026-82229

T−79d 28 ago. 2026
4,3 Media

CVE-2026-77757: recorrido de rutas (path traversal) en Directorist: AI-Powered Business Directory, Listings & Classified Ads

CVE-2026-77757

T−79d 28 ago. 2026
4,7 Media

CVE-2026-13415: gestión incorrecta de privilegios en CMP – Coming Soon & Maintenance Plugin by NiteoThemes

CVE-2026-13415

T−79d 28 ago. 2026
8,1 Alta

CVE-2026-82226: deserialización de datos no fiables en Tickera – Sell Tickets & Manage Events

CVE-2026-82226

T−79d 28 ago. 2026
6,1 Media

CVE-2026-82123: cross-site scripting (XSS) en Tangible: Loops & Logic

CVE-2026-82123

T−79d 28 ago. 2026
7,2 Alta

CVE-2026-81768: cross-site scripting (XSS) en Super Store Finder

CVE-2026-81768

T−79d 28 ago. 2026
4,4 Media

CVE-2026-78364: cross-site scripting (XSS) en MW WP Form

CVE-2026-78364

T−79d 28 ago. 2026
7,3 Alta

CVE-2026-19423: gestión incorrecta de privilegios en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

CVE-2026-19423

T−79d 28 ago. 2026
5,3 Media

CVE-2026-13611: exposición de información sensible en KiviCare – Clinic & Patient Management System (EHR)

CVE-2026-13611

T−79d 28 ago. 2026
6,1 Media

CVE-2026-14307: cross-site scripting (XSS) en GeotargetingWP

CVE-2026-14307

T−79d 28 ago. 2026
7,5 Alta

CVE-2026-16567: recorrido de rutas (path traversal) en Document Embedder – let visitors read files without downloading

CVE-2026-16567

T−79d 28 ago. 2026
6,3 Media

CVE-2026-81297: gestión incorrecta de privilegios en Fluent Forms Pro Add On Pack

CVE-2026-81297

T−79d 28 ago. 2026
5,3 Media

CVE-2026-81767: falta de autorización en Simple Payment

CVE-2026-81767

T−79d 28 ago. 2026
5,3 Media

CVE-2026-79706: recorrido de rutas (path traversal) en Breeze Cache

CVE-2026-79706

T−79d 28 ago. 2026
6,3 Media

CVE-2026-19222: gestión incorrecta de privilegios en Forminator Forms – Contact Form, Payment Form & Custom Form Builder

CVE-2026-19222

T−79d 28 ago. 2026
6,6 Media

CVE-2026-14558: deserialización de datos no fiables en User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

CVE-2026-14558

T−79d 28 ago. 2026
4,4 Media

CVE-2026-39070: cross-site scripting (XSS) en Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist

CVE-2026-39070

T−79d 28 ago. 2026
4,3 Media

CVE-2026-77003: falta de autorización en Content Mask

CVE-2026-77003

T−79d 28 ago. 2026
7,5 Alta

CVE-2026-81763: inyección SQL en Throws SPAM Away

CVE-2026-81763

T−79d 28 ago. 2026
8,8 Alta

CVE-2026-74851: inyección de código en Pods – Custom Content Types and Fields

CVE-2026-74851

T−79d 28 ago. 2026
5,3 Media

CVE-2026-75798: falta de autorización en AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini

CVE-2026-75798

T−79d 28 ago. 2026