Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 7,2 Alta

    CVE-2026-96894: cross-site scripting (XSS) en ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce

    CVE-2026-96894

    T−15d 30 oct. 2026

  2. 4,3 Media

    CVE-2026-119466: falsificación de peticiones (CSRF) en WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce

    CVE-2026-119466

    T−15d 30 oct. 2026

  3. 4,3 Media

    CVE-2026-65566: falsificación de peticiones (CSRF) en AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini

    CVE-2026-65566

    T−15d 30 oct. 2026

  4. 6,5 Media

    CVE-2026-102905: inyección de código en Ad Inserter – Ad Manager & AdSense Ads

    CVE-2026-102905

    T−15d 30 oct. 2026

  5. 8,1 Alta

    CVE-2026-115346: subida de ficheros peligrosos en Avada | Website Builder For WordPress & WooCommerce

    CVE-2026-115346

    T−15d 30 oct. 2026

  6. 6,5 Media

    CVE-2026-118635: inyección de código en GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

    CVE-2026-118635

    T−15d 30 oct. 2026

  7. 4,3 Media

    CVE-2026-62055: falta de autorización en Event Tickets and Registration

    CVE-2026-62055

    T−15d 30 oct. 2026

  8. 6,4 Media

    CVE-2026-119365: cross-site scripting (XSS) en Media Player Addons for Elementor – Audio and Video Widgets for Elementor

    CVE-2026-119365

    T−15d 30 oct. 2026

  9. 4,3 Media

    CVE-2026-119367: falta de autorización en The Events Calendar

    CVE-2026-119367

    T−15d 30 oct. 2026

  10. 4,9 Media

    CVE-2026-104739: recorrido de rutas (path traversal) en JS Help Desk – AI-Powered Support & Ticketing System

    CVE-2026-104739

    T−15d 30 oct. 2026

  11. 7,2 Alta

    CVE-2026-66570: cross-site scripting (XSS) en Iptanus File Upload

    CVE-2026-66570

    T−15d 30 oct. 2026

  12. 6,4 Media

    CVE-2026-120575: cross-site scripting (XSS) en Photo Engine (Media Organizer & Lightroom)

    CVE-2026-120575

    T−15d 30 oct. 2026

  13. 6,4 Media

    CVE-2026-120552: cross-site scripting (XSS) en SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress

    CVE-2026-120552

    T−15d 30 oct. 2026

  14. 6,5 Media

    CVE-2026-13747: falta de autorización en Meow Gallery

    CVE-2026-13747

    T−15d 30 oct. 2026

  15. 6,4 Media

    CVE-2026-115869: cross-site scripting (XSS) en Themify Builder

    CVE-2026-115869

    T−15d 30 oct. 2026

  16. 8,1 Alta

    CVE-2026-120538: autenticación incorrecta en Easy Digital Downloads – eCommerce Payments and Subscriptions made easy

    CVE-2026-120538

    T−15d 30 oct. 2026

  17. 4,3 Media

    CVE-2026-62141: falta de autorización en FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution

    CVE-2026-62141

    T−15d 30 oct. 2026

  18. 7,5 Alta

    CVE-2026-62048: inyección SQL en Bookit — Booking & Appointment Calendar

    CVE-2026-62048

    T−15d 30 oct. 2026

  19. 6,4 Media

    CVE-2026-119369: cross-site scripting (XSS) en The Events Calendar

    CVE-2026-119369

    T−15d 30 oct. 2026

  20. 4,3 Media

    CVE-2026-116407: falta de autorización en Easy Appointment Booking & Scheduling Plugin – Webba Booking Calendar

    CVE-2026-116407

    T−15d 30 oct. 2026

  21. 5,3 Media

    CVE-2026-119368: falta de autorización en The Events Calendar

    CVE-2026-119368

    T−15d 30 oct. 2026

  22. 8,1 Alta

    CVE-2026-120574: autenticación incorrecta en SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments

    CVE-2026-120574

    T−15d 30 oct. 2026

  23. 5,3 Media

    CVE-2026-119482: falta de autorización en JetFormBuilder — Dynamic Blocks Form Builder

    CVE-2026-119482

    T−15d 30 oct. 2026

  24. 7,4 Alta

    CVE-2026-118205: gestión incorrecta de privilegios en Essential Addons for Elementor – Popular Elementor Templates & Widgets

    CVE-2026-118205

    T−15d 30 oct. 2026

  25. 4,3 Media

    CVE-2026-109592: falta de autorización en OpenStation – Admin Dashboard Notes, Custom Dashboard, AI Assistant & PWA

    CVE-2026-109592

    T−15d 30 oct. 2026

  26. 5,3 Media

    CVE-2026-116860: falta de autorización en Timetics – Appointment Booking Calendar & Scheduling

    CVE-2026-116860

    T−15d 30 oct. 2026

  27. 6,4 Media

    CVE-2026-119370: cross-site scripting (XSS) en The Events Calendar

    CVE-2026-119370

    T−15d 30 oct. 2026

  28. 6,4 Media

    CVE-2026-65444: cross-site scripting (XSS) en Blocksy Companion

    CVE-2026-65444

    T−15d 30 oct. 2026

  29. 6,4 Media

    CVE-2026-102918: cross-site scripting (XSS) en Redux Framework

    CVE-2026-102918

    T−15d 30 oct. 2026

  30. 7,5 Alta

    CVE-2026-110305: exposición de información sensible en Advanced Custom Fields: Extended

    CVE-2026-110305

    T−15d 30 oct. 2026