Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 8,8 Alta

    CVE-2026-104012: gestión incorrecta de privilegios en Rox Appointment Booking – Event, Calendar & Appointment Scheduling

    CVE-2026-104012

    T−14d 30 oct. 2026

  2. 7,2 Alta

    CVE-2026-107759: cross-site scripting (XSS) en WPO365 | MICROSOFT 365 GRAPH MAILER

    CVE-2026-107759

    T−14d 30 oct. 2026

  3. 6,5 Media

    CVE-2025-9462: inyección SQL en WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden

    CVE-2025-9462

    T−15d 30 oct. 2026

  4. 6,4 Media

    CVE-2026-116535: cross-site scripting (XSS) en SEOPress – AI SEO Plugin & On-site SEO

    CVE-2026-116535

    T−15d 30 oct. 2026

  5. 7,2 Alta

    CVE-2026-118057: cross-site scripting (XSS) en Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning

    CVE-2026-118057

    T−15d 30 oct. 2026

  6. 4,3 Media

    CVE-2025-11455: falta de autorización en Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF

    CVE-2025-11455

    T−15d 30 oct. 2026

  7. — Alta

    CVE-2026-59978: validación de entrada incorrecta en adminneo-org/adminneo

    CVE-2026-59978 · GHSA-JM85-8CPP-9CJC

    T−15d 30 oct. 2026

  8. 7,5 Alta

    CVE-2026-120040: gestión incorrecta de privilegios en Mail logging & Catcher

    CVE-2026-120040

    T−15d 30 oct. 2026

  9. 7,5 Alta

    CVE-2026-119163: inyección SQL en FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce

    CVE-2026-119163

    T−15d 30 oct. 2026

  10. 6,4 Media

    CVE-2026-107765: cross-site scripting (XSS) en Discussion Board – WordPress Forum Plugin

    CVE-2026-107765

    T−15d 30 oct. 2026

  11. 6,4 Media

    CVE-2026-116546: cross-site scripting (XSS) en WP Job Portal – AI-Powered Recruitment System for Company or Job Board website

    CVE-2026-116546

    T−15d 30 oct. 2026

  12. 4,3 Media

    CVE-2026-109386: falta de autorización en Hustle – Email Marketing, Lead Generation, Optins, Popups

    CVE-2026-109386

    T−15d 30 oct. 2026

  13. 7,2 Alta

    CVE-2026-107750: cross-site scripting (XSS) en PDF Invoices & Packing Slips for WooCommerce

    CVE-2026-107750

    T−15d 30 oct. 2026

  14. 5,3 Media

    CVE-2026-109217: vulnerabilidad en PDF Invoices & Packing Slips for WooCommerce

    CVE-2026-109217

    T−15d 30 oct. 2026

  15. 9,1 Crít.

    CVE-2026-116557: falta de autorización en WP Booking System – Booking Calendar

    CVE-2026-116557

    T−15d 30 oct. 2026

  16. 6,1 Media

    CVE-2026-88942: cross-site scripting (XSS) en Product Filter for WooCommerce by WBW

    CVE-2026-88942

    T−15d 30 oct. 2026

  17. 5,3 Media

    CVE-2026-11396: falta de autorización en Product Filter for WooCommerce by WBW

    CVE-2026-11396

    T−15d 30 oct. 2026

  18. 5,4 Media

    CVE-2026-110251: recorrido de rutas (path traversal) en Revopic – Photo Reviews for WooCommerce

    CVE-2026-110251

    T−15d 30 oct. 2026

  19. 6,1 Media

    CVE-2026-111109: cross-site scripting (XSS) en Webmention

    CVE-2026-111109

    T−15d 30 oct. 2026

  20. 5,3 Media

    CVE-2026-62056: falta de autorización en FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution

    CVE-2026-62056

    T−15d 30 oct. 2026

  21. 4,3 Media

    CVE-2026-62023: falta de autorización en Unlimited Elements for Elementor

    CVE-2026-62023

    T−15d 30 oct. 2026

  22. 4,3 Media

    CVE-2026-62019: falta de autorización en Bookit — Booking & Appointment Calendar

    CVE-2026-62019

    T−15d 30 oct. 2026

  23. 4,3 Media

    CVE-2026-62047: falta de autorización en Event Tickets and Registration

    CVE-2026-62047

    T−15d 30 oct. 2026

  24. 4,3 Media

    CVE-2026-104674: falta de autorización en Booktics – Appointment Booking Calendar for Service Businesses

    CVE-2026-104674

    T−15d 30 oct. 2026

  25. 7,5 Alta

    CVE-2026-62121: inclusión de ficheros en PHP en Unlimited Elements for Elementor

    CVE-2026-62121

    T−15d 30 oct. 2026

  26. 5,4 Media

    CVE-2026-120019: cross-site scripting (XSS) en W3 Total Cache

    CVE-2026-120019

    T−15d 30 oct. 2026

  27. 5,3 Media

    CVE-2026-62122: falta de autorización en Booktics – Appointment Booking Calendar for Service Businesses

    CVE-2026-62122

    T−15d 30 oct. 2026

  28. 7,2 Alta

    CVE-2026-116548: cross-site scripting (XSS) en VikRentCar Car Rental Management System

    CVE-2026-116548

    T−15d 30 oct. 2026

  29. 7,2 Alta

    CVE-2026-111254: cross-site scripting (XSS) en W3 Total Cache

    CVE-2026-111254

    T−15d 30 oct. 2026

  30. 6,5 Media

    CVE-2026-119980: autenticación incorrecta en UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

    CVE-2026-119980

    T−15d 30 oct. 2026