[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

Tecnología Gravedad Sólo las que se están explotando

— Alta

CVE-2026-96632: cross-site scripting (XSS) en adminneo-org/adminneo

CVE-2026-96632 · GHSA-RX7M-WXWQ-VXR9

T−14d 30 oct. 2026
— Alta

CVE-2026-96630: vulnerabilidad en adminneo-org/adminneo

CVE-2026-96630 · GHSA-Q5MP-GFJF-CF2J

T−14d 30 oct. 2026
— Media

CVE-2026-96629: vulnerabilidad en adminneo-org/adminneo

CVE-2026-96629 · GHSA-WM25-49W3-5QRG

T−14d 30 oct. 2026
6,5 Media

CVE-2026-15272: inyección SQL en Web 2.0 Directory plugin for WordPress

CVE-2026-15272

T−14d 30 oct. 2026
6,4 Media

CVE-2026-107711: cross-site scripting (XSS) en FlexStock – Product Stock Sync with Google Sheets for WooCommerce

CVE-2026-107711

T−14d 30 oct. 2026
6,1 Media

CVE-2026-100151: cross-site scripting (XSS) en Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder

CVE-2026-100151

T−14d 30 oct. 2026
8,8 Alta

CVE-2026-76010: subida de ficheros peligrosos en Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

CVE-2026-76010

T−14d 30 oct. 2026
4,3 Media

CVE-2026-109231: vulnerabilidad en Germanized for WooCommerce

CVE-2026-109231

T−14d 30 oct. 2026
6,1 Media

CVE-2026-104926: cross-site scripting (XSS) en WooCommerce Extra Product Options Pro

CVE-2026-104926

T−14d 30 oct. 2026
7,2 Alta

CVE-2026-120114: cross-site scripting (XSS) en Debug Log Manager – Conveniently Monitor and Inspect Errors

CVE-2026-120114

T−14d 30 oct. 2026
7,5 Alta

CVE-2026-109197: inyección SQL en WP Directory Kit

CVE-2026-109197

T−14d 30 oct. 2026
6,4 Media

CVE-2026-116752: cross-site scripting (XSS) en GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

CVE-2026-116752

T−14d 30 oct. 2026
6,4 Media

CVE-2026-96554: cross-site scripting (XSS) en BuddyBoss Platform

CVE-2026-96554

T−14d 30 oct. 2026
5,3 Media

CVE-2026-109367: exposición de información sensible en All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)

CVE-2026-109367

T−14d 30 oct. 2026
5,3 Media

CVE-2026-103915: exposición de información sensible en Booking for Appointments and Events Calendar – Amelia

CVE-2026-103915

T−14d 30 oct. 2026
9,8 Crít.

CVE-2026-118235: subida de ficheros peligrosos en SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications

CVE-2026-118235

T−14d 30 oct. 2026
6,4 Media

CVE-2026-119160: cross-site scripting (XSS) en Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News

CVE-2026-119160

T−14d 30 oct. 2026
5,3 Media

CVE-2026-101325: inyección SQL en Newsletters

CVE-2026-101325

T−14d 30 oct. 2026
7,2 Alta

CVE-2026-110530: cross-site scripting (XSS) en FeedWordPress

CVE-2026-110530

T−14d 30 oct. 2026
9,1 Crít.

CVE-2026-103882: recorrido de rutas (path traversal) en Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress

CVE-2026-103882

T−14d 30 oct. 2026
7,2 Alta

CVE-2026-120075: cross-site scripting (XSS) en WP Activity Log

CVE-2026-120075

T−14d 30 oct. 2026
6,4 Media

CVE-2026-111592: cross-site scripting (XSS) en Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors

CVE-2026-111592

T−14d 30 oct. 2026
6,1 Media

CVE-2026-103962: cross-site scripting (XSS) en User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

CVE-2026-103962

T−14d 30 oct. 2026
8,8 Alta

CVE-2026-120070: gestión incorrecta de privilegios en User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

CVE-2026-120070

T−14d 30 oct. 2026
5,4 Media

CVE-2026-111070: cross-site scripting (XSS) en Content Pilot – Autoblogging & Affiliate Marketing Suite

CVE-2026-111070

T−14d 30 oct. 2026
9,8 Crít.

CVE-2026-116512: subida de ficheros peligrosos en Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker

CVE-2026-116512

T−14d 30 oct. 2026
5,9 Media

CVE-2026-110023: falta de autorización en WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps

CVE-2026-110023

T−14d 30 oct. 2026
8,1 Alta

CVE-2026-103898: autenticación incorrecta en Wp Social Login and Register Social Counter

CVE-2026-103898

T−14d 30 oct. 2026
9,8 Crít.

CVE-2026-119096: autenticación incorrecta en Uncanny Toolkit for LearnDash

CVE-2026-119096

T−14d 30 oct. 2026
6,5 Media

CVE-2026-103997: falta de autorización en Redux Framework

CVE-2026-103997

T−14d 30 oct. 2026