Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.303expedientes con estos filtros

Filtros

  1. 7,5 Alta

    CVE-2026-78260: inyección SQL en ePayco plugin for WooCommerce

    CVE-2026-78260

    T−82d 25 ago. 2026

  2. 7,2 Alta

    CVE-2026-74932: cross-site scripting (XSS) en WP Fastest Cache – WordPress Cache Plugin

    CVE-2026-74932

    T−82d 25 ago. 2026

  3. 8,1 Alta

    CVE-2026-78286: deserialización de datos no fiables en Geo Controller – Geolocation & Geotargeting

    CVE-2026-78286

    T−82d 25 ago. 2026

  4. 6,4 Media

    CVE-2026-3002: cross-site scripting (XSS) en Gutenverse – WordPress Blocks, Page Builder & Site Editor

    CVE-2026-3002

    T−82d 25 ago. 2026

  5. 8,1 Alta

    CVE-2026-77016: recorrido de rutas (path traversal) en Workeera – AI Job Board with Applicant Tracking System (ATS)

    CVE-2026-77016

    T−82d 25 ago. 2026

  6. 7,5 Alta

    CVE-2026-78288: inyección SQL en Beautiful taxonomy filters

    CVE-2026-78288

    T−82d 25 ago. 2026

  7. 8,8 Alta

    CVE-2026-75977: gestión incorrecta de privilegios en Mang Board

    CVE-2026-75977

    T−82d 25 ago. 2026

  8. 7,2 Alta

    CVE-2026-78283: cross-site scripting (XSS) en Music Player for WooCommerce

    CVE-2026-78283

    T−82d 25 ago. 2026

  9. 4,9 Media

    CVE-2026-19454: falta de autorización en JetBackup – Backup, Restore & Migrate

    CVE-2026-19454

    T−82d 25 ago. 2026

  10. 5,3 Media

    CVE-2026-16612: exposición de información sensible en FiboSearch – Ajax Search for WooCommerce

    CVE-2026-16612

    T−82d 25 ago. 2026

  11. 4,4 Media

    CVE-2026-13416: cross-site scripting (XSS) en CMP – Coming Soon & Maintenance Plugin by NiteoThemes

    CVE-2026-13416

    T−82d 25 ago. 2026

  12. 6,4 Media

    CVE-2026-18547: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2026-18547

    T−82d 25 ago. 2026

  13. 4,9 Media

    CVE-2026-77824: inyección SQL en Media Sweep – WordPress Media Cleaner

    CVE-2026-77824

    T−83d 25 ago. 2026

  14. 5,3 Media

    CVE-2026-17587: falta de autorización en My Agile Privacy® – CMP, Cookie Consent & Privacy Tools

    CVE-2026-17587

    T−83d 25 ago. 2026

  15. 4,3 Media

    CVE-2026-75908: falta de autorización en Newsletters

    CVE-2026-75908

    T−83d 25 ago. 2026

  16. 7,2 Alta

    CVE-2026-75971: gestión incorrecta de privilegios en ShopEngine – All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets

    CVE-2026-75971

    T−83d 25 ago. 2026

  17. 8,8 Alta

    CVE-2026-19949: inyección SQL en All-in-One WP Migration and Backup

    CVE-2026-19949

    T−83d 25 ago. 2026

  18. 6,4 Media

    CVE-2026-76128: cross-site scripting (XSS) en eCommerce Product Catalog

    CVE-2026-76128

    T−83d 24 ago. 2026

  19. 6,4 Media

    CVE-2026-18100: cross-site scripting (XSS) en MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor

    CVE-2026-18100

    T−83d 24 ago. 2026

  20. 6,4 Media

    CVE-2026-18512: cross-site scripting (XSS) en TranslatePress – Translate Multilingual sites with AI Translation

    CVE-2026-18512

    T−83d 24 ago. 2026

  21. 7,2 Alta

    CVE-2026-18328: cross-site scripting (XSS) en Forminator Forms – Contact Form, Payment Form & Custom Form Builder

    CVE-2026-18328

    T−83d 24 ago. 2026

  22. 7,2 Alta

    CVE-2026-18323: cross-site scripting (XSS) en Forminator Forms – Contact Form, Payment Form & Custom Form Builder

    CVE-2026-18323

    T−83d 24 ago. 2026

  23. 8,8 Alta

    CVE-2026-16601: subida de ficheros peligrosos en CM Map Locations – Visualize and share your locations in a few clicks

    CVE-2026-16601

    T−83d 24 ago. 2026

  24. 6,4 Media

    CVE-2026-12561: cross-site scripting (XSS) en tagDiv Composer

    CVE-2026-12561

    T−83d 24 ago. 2026

  25. 8,8 Alta

    CVE-2026-19892: falta de autorización en InfusedWoo Pro

    CVE-2026-19892

    T−83d 24 ago. 2026

  26. 6,4 Media

    CVE-2026-19943: cross-site scripting (XSS) en Gutenverse – WordPress Blocks, Page Builder & Site Editor

    CVE-2026-19943

    T−83d 24 ago. 2026

  27. 4,3 Media

    CVE-2026-75930: falta de autorización en FundEngine – Donation and Crowdfunding Platform

    CVE-2026-75930

    T−83d 24 ago. 2026

  28. 6,4 Media

    CVE-2026-76063: cross-site scripting (XSS) en FundEngine – Donation and Crowdfunding Platform

    CVE-2026-76063

    T−83d 24 ago. 2026

  29. 6,1 Media

    CVE-2026-17089: cross-site scripting (XSS) en Events Manager – Calendar, Bookings, Tickets, Appointments and more!

    CVE-2026-17089

    T−83d 24 ago. 2026

  30. 6,6 Media

    CVE-2026-14280: inclusión de ficheros en PHP en Events Manager – Calendar, Bookings, Tickets, Appointments and more!

    CVE-2026-14280

    T−83d 24 ago. 2026