Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 7,2 Alta

    CVE-2026-119162: cross-site scripting (XSS) en User Submitted Posts – Enable Users to Submit Posts from the Front End

    CVE-2026-119162

    T−15d 30 oct. 2026

  2. 7,2 Alta

    CVE-2026-115840: cross-site scripting (XSS) en VikRentCar Car Rental Management System

    CVE-2026-115840

    T−15d 30 oct. 2026

  3. 5,3 Media

    CVE-2026-119166: autenticación incorrecta en Welcart e-Commerce

    CVE-2026-119166

    T−15d 30 oct. 2026

  4. 7,2 Alta

    CVE-2026-118070: cross-site scripting (XSS) en Welcart e-Commerce

    CVE-2026-118070

    T−15d 30 oct. 2026

  5. 7,2 Alta

    CVE-2026-119089: cross-site scripting (XSS) en ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin

    CVE-2026-119089

    T−15d 30 oct. 2026

  6. 7,2 Alta

    CVE-2026-107653: cross-site scripting (XSS) en SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments

    CVE-2026-107653

    T−15d 30 oct. 2026

  7. 5,3 Media

    CVE-2026-90960: exposición de información sensible en Seraphinite Accelerator

    CVE-2026-90960

    T−15d 30 oct. 2026

  8. 7,2 Alta

    CVE-2026-119065: cross-site scripting (XSS) en Shipping Zones by Drawing for WooCommerce

    CVE-2026-119065

    T−15d 30 oct. 2026

  9. 7,2 Alta

    CVE-2026-116522: cross-site scripting (XSS) en Relevanssi – A Better Search

    CVE-2026-116522

    T−15d 30 oct. 2026

  10. 9,1 Crít.

    CVE-2026-89270: falta de autorización en Popup Builder – Create highly converting, mobile friendly marketing popups.

    CVE-2026-89270

    T−15d 30 oct. 2026

  11. 9,8 Crít.

    CVE-2026-109220: deserialización de datos no fiables en PDF Invoice for WooCommerce + Drag and Drop Template Builder

    CVE-2026-109220

    T−15d 30 oct. 2026

  12. 6,5 Media

    CVE-2026-100155: inyección de código en Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder

    CVE-2026-100155

    T−15d 30 oct. 2026

  13. 7,2 Alta

    CVE-2026-116520: cross-site scripting (XSS) en PPWP – Password Protect Pages

    CVE-2026-116520

    T−15d 30 oct. 2026

  14. 5,4 Media

    CVE-2026-101326: inyección de código en Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder

    CVE-2026-101326

    T−15d 30 oct. 2026

  15. 7,2 Alta

    CVE-2026-109997: cross-site scripting (XSS) en Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder

    CVE-2026-109997

    T−15d 30 oct. 2026

  16. 5,4 Media

    CVE-2026-116563: cross-site scripting (XSS) en Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

    CVE-2026-116563

    T−15d 30 oct. 2026

  17. 7,2 Alta

    CVE-2026-109234: cross-site scripting (XSS) en Meow Lightbox

    CVE-2026-109234

    T−15d 30 oct. 2026

  18. 7,5 Alta

    CVE-2026-76012: subida de ficheros peligrosos en Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

    CVE-2026-76012

    T−15d 30 oct. 2026

  19. 6,4 Media

    CVE-2026-9239: cross-site scripting (XSS) en Meow Gallery

    CVE-2026-9239

    T−15d 30 oct. 2026

  20. 4,7 Media

    CVE-2026-116552: cross-site scripting (XSS) en Like Button Rating ♥ LikeBtn

    CVE-2026-116552

    T−15d 30 oct. 2026

  21. 6,5 Media

    CVE-2026-115820: inyección SQL en Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin

    CVE-2026-115820

    T−15d 30 oct. 2026

  22. 5,4 Media

    CVE-2026-109984: cross-site scripting (XSS) en FV Flowplayer Video Player

    CVE-2026-109984

    T−15d 30 oct. 2026

  23. 6,4 Media

    CVE-2026-119113: cross-site scripting (XSS) en GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

    CVE-2026-119113

    T−15d 30 oct. 2026

  24. 6,4 Media

    CVE-2026-110533: cross-site scripting (XSS) en FV Flowplayer Video Player

    CVE-2026-110533

    T−15d 30 oct. 2026

  25. 5,4 Media

    CVE-2026-110001: cross-site scripting (XSS) en FV Flowplayer Video Player

    CVE-2026-110001

    T−15d 30 oct. 2026

  26. 7,2 Alta

    CVE-2026-104744: cross-site scripting (XSS) en Independent Analytics Pro

    CVE-2026-104744

    T−15d 30 oct. 2026

  27. 7,5 Alta

    CVE-2026-97638: acceso a datos de otros usuarios (IDOR) en Forminator Forms – Contact Form, Payment Form & Custom Form Builder

    CVE-2026-97638

    T−15d 30 oct. 2026

  28. 7,5 Alta

    CVE-2026-107630: falta de autorización en Email Templates Customizer and Designer for WordPress and WooCommerce

    CVE-2026-107630

    T−15d 30 oct. 2026

  29. 6,4 Media

    CVE-2026-119176: cross-site scripting (XSS) en CP Multi View Events Calendar

    CVE-2026-119176

    T−15d 30 oct. 2026

  30. 7,2 Alta

    CVE-2026-112365: cross-site scripting (XSS) en easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution

    CVE-2026-112365

    T−15d 30 oct. 2026