Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.303expedientes con estos filtros

Filtros

  1. 7,2 Alta

    CVE-2026-82224: cross-site scripting (XSS) en Affiliate Program Suite — SliceWP Affiliates

    CVE-2026-82224

    T−79d 28 ago. 2026

  2. 9,8 Crít.

    CVE-2026-19092: inyección en Tutor LMS – eLearning and online course solution

    CVE-2026-19092

    T−80d 27 ago. 2026

  3. 9,8 Crít.

    CVE-2026-76581: vulnerabilidad en WPMU DEV Dashboard

    CVE-2026-76581

    T−80d 27 ago. 2026

  4. — Alta

    CVE-2026-54718: vulnerabilidad en symbiote/silverstripe-advancedworkflow

    CVE-2026-54718 · GHSA-39MM-RWM3-29JP

    T−80d 27 ago. 2026

  5. — Baja

    CVE-2026-54713: vulnerabilidad en cakephp/queue

    CVE-2026-54713 · GHSA-R5PM-VRC5-3M73

    T−80d 27 ago. 2026

  6. — Alta

    CVE-2026-54721: validación de entrada incorrecta en silverstripe/userforms

    CVE-2026-54721 · GHSA-G8WR-R2V2-VQC6

    T−80d 27 ago. 2026

  7. — Media

    CVE-2026-54720: cross-site scripting (XSS) en silverstripe/framework

    CVE-2026-54720 · GHSA-GVRW-QQP5-JGC5

    T−80d 27 ago. 2026

  8. 6,4 Media

    CVE-2026-16654: cross-site scripting (XSS) en Avada (Fusion) Builder

    CVE-2026-16654

    T−80d 27 ago. 2026

  9. 6,5 Media

    CVE-2026-16759: inyección en Tutor LMS – eLearning and online course solution

    CVE-2026-16759

    T−80d 27 ago. 2026

  10. 7,5 Alta

    CVE-2026-18983: subida de ficheros peligrosos en One User Avatar | User Profile Picture

    CVE-2026-18983

    T−80d 27 ago. 2026

  11. 7,2 Alta

    CVE-2026-18978: cross-site scripting (XSS) en LiteSpeed Cache

    CVE-2026-18978

    T−80d 27 ago. 2026

  12. 6,4 Media

    CVE-2026-3129: cross-site scripting (XSS) en LiteSpeed Cache

    CVE-2026-3129

    T−80d 27 ago. 2026

  13. 7,2 Alta

    CVE-2026-18324: cross-site scripting (XSS) en Forminator Forms – Contact Form, Payment Form & Custom Form Builder

    CVE-2026-18324

    T−80d 27 ago. 2026

  14. 7,2 Alta

    CVE-2026-76053: cross-site scripting (XSS) en TranslatePress – Translate Multilingual sites with AI Translation

    CVE-2026-76053

    T−80d 27 ago. 2026

  15. 7,2 Alta

    CVE-2026-77365: cross-site scripting (XSS) en Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization

    CVE-2026-77365

    T−80d 27 ago. 2026

  16. 6,4 Media

    CVE-2026-15798: cross-site scripting (XSS) en Smart Slider 3

    CVE-2026-15798

    T−80d 27 ago. 2026

  17. 4,3 Media

    CVE-2026-18233: falta de autorización en MStore API – Create Native Android & iOS Apps On The Cloud

    CVE-2026-18233

    T−80d 27 ago. 2026

  18. 7,5 Alta

    CVE-2026-5097: inyección SQL en wpForo Forum

    CVE-2026-5097

    T−80d 27 ago. 2026

  19. 4,3 Media

    CVE-2026-76549: falsificación de peticiones (CSRF) en UpdraftPlus: WP Backup & Migration Plugin

    CVE-2026-76549

    T−80d 27 ago. 2026

  20. 4,3 Media

    CVE-2026-78138: exposición de información sensible en Finale Lite – Sales Countdown Timer & Discount for WooCommerce

    CVE-2026-78138

    T−80d 27 ago. 2026

  21. 6,4 Media

    CVE-2026-5510: cross-site scripting (XSS) en GiveWP – Donation Plugin and Fundraising Platform

    CVE-2026-5510

    T−80d 27 ago. 2026

  22. 7,5 Alta

    CVE-2026-77012: recorrido de rutas (path traversal) en 爱采集数据采集和发布插件

    CVE-2026-77012

    T−80d 27 ago. 2026

  23. 6,4 Media

    CVE-2026-6128: cross-site scripting (XSS) en All-in-One WP Migration Unlimited Extension

    CVE-2026-6128

    T−80d 27 ago. 2026

  24. 7,2 Alta

    CVE-2026-6286: cross-site scripting (XSS) en Booking for Appointments and Events Calendar – Amelia

    CVE-2026-6286

    T−80d 27 ago. 2026

  25. 6,3 Media

    CVE-2026-18234: acceso a datos de otros usuarios (IDOR) en MStore API – Create Native Android & iOS Apps On The Cloud

    CVE-2026-18234

    T−80d 27 ago. 2026

  26. 6,5 Media

    CVE-2026-75797: recorrido de rutas (path traversal) en AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini

    CVE-2026-75797

    T−80d 27 ago. 2026

  27. 7,2 Alta

    CVE-2026-81290: cross-site scripting (XSS) en Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress

    CVE-2026-81290

    T−80d 27 ago. 2026

  28. 7,5 Alta

    CVE-2026-81285: consumo de recursos sin control en Smush – Image Optimization, Compression, Lazy Load, WebP & CDN

    CVE-2026-81285

    T−80d 27 ago. 2026

  29. 5,3 Media

    CVE-2026-80311: acceso a datos de otros usuarios (IDOR) en Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions

    CVE-2026-80311

    T−80d 27 ago. 2026

  30. 4,3 Media

    CVE-2026-81759: falta de autorización en Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar

    CVE-2026-81759

    T−80d 27 ago. 2026