[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

Tecnología Gravedad Sólo las que se están explotando

7,5 Alta

CVE-2026-73186: deserialización de datos no fiables en Enable Media Replace

CVE-2026-73186

T−15d 30 oct. 2026
8,8 Alta

CVE-2026-116852: inyección de código en Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets

CVE-2026-116852

T−15d 30 oct. 2026
7,5 Alta

CVE-2026-78527: deserialización de datos no fiables en Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews

CVE-2026-78527

T−15d 30 oct. 2026
6,6 Media

CVE-2026-118089: deserialización de datos no fiables en Product Feed Manager for WooCommerce – RexFeed – Sell on 200+ Shopping Channels

CVE-2026-118089

T−15d 30 oct. 2026
7,2 Alta

CVE-2026-94175: cross-site scripting (XSS) en All In One Login

CVE-2026-94175

T−15d 30 oct. 2026
8,1 Alta

CVE-2026-90888: deserialización de datos no fiables en LeadSnap

CVE-2026-90888

T−15d 30 oct. 2026
7,2 Alta

CVE-2026-105077: cross-site scripting (XSS) en Ad Inserter – Ad Manager & AdSense Ads

CVE-2026-105077

T−15d 30 oct. 2026
6,3 Media

CVE-2026-118086: gestión incorrecta de privilegios en WP BASE Booking of Appointments, Services and Events

CVE-2026-118086

T−15d 30 oct. 2026
5,3 Media

CVE-2026-115947: exposición de información sensible en HUSKY – Products Filter for WooCommerce Professional. MCP is onboard

CVE-2026-115947

T−15d 30 oct. 2026
6,4 Media

CVE-2026-114711: cross-site scripting (XSS) en MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions

CVE-2026-114711

T−15d 30 oct. 2026
7,2 Alta

CVE-2026-116847: cross-site scripting (XSS) en Mang Board

CVE-2026-116847

T−15d 30 oct. 2026
7,2 Alta

CVE-2026-116405: cross-site scripting (XSS) en VikRentCar Car Rental Management System

CVE-2026-116405

T−15d 30 oct. 2026
5,3 Media

CVE-2026-116853: falta de autorización en GiveWP – Donation Plugin and Fundraising Platform

CVE-2026-116853

T−15d 30 oct. 2026
7,2 Alta

CVE-2026-116851: cross-site scripting (XSS) en eCommerce Product Catalog

CVE-2026-116851

T−15d 30 oct. 2026
7,2 Alta

CVE-2026-48201: cross-site scripting (XSS) en Fast Velocity Minify

CVE-2026-48201

T−15d 30 oct. 2026
7,5 Alta

CVE-2026-118090: deserialización de datos no fiables en MasterStudy LMS WordPress Plugin – for Online Courses and Education

CVE-2026-118090

T−15d 30 oct. 2026
6,4 Media

CVE-2026-27061: cross-site scripting (XSS) en User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

CVE-2026-27061

T−15d 30 oct. 2026
7,3 Alta

CVE-2026-116386: gestión incorrecta de privilegios en SMS Alert – SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery

CVE-2026-116386

T−15d 30 oct. 2026
6,3 Media

CVE-2026-54854: gestión incorrecta de privilegios en User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

CVE-2026-54854

T−15d 30 oct. 2026
7,2 Alta

CVE-2026-28160: cross-site scripting (XSS) en VikRentCar Car Rental Management System

CVE-2026-28160

T−15d 30 oct. 2026
7,2 Alta

CVE-2026-54855: cross-site scripting (XSS) en User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

CVE-2026-54855

T−15d 30 oct. 2026
5,3 Media

CVE-2026-116401: falta de autorización en HUSKY – Products Filter for WooCommerce Professional. MCP is onboard

CVE-2026-116401

T−15d 30 oct. 2026
7,2 Alta

CVE-2026-39786: cross-site scripting (XSS) en BA Book Everything

CVE-2026-39786

T−15d 30 oct. 2026
6,4 Media

CVE-2026-116854: cross-site scripting (XSS) en WP Customer Area

CVE-2026-116854

T−15d 30 oct. 2026
7,5 Alta

CVE-2026-39734: recorrido de rutas (path traversal) en WP Easy Pay – Payment and Donation Form Builder for Square

CVE-2026-39734

T−15d 30 oct. 2026
5,3 Media

CVE-2026-116861: exposición de información sensible en Flexible Chat – AI chatbot plugin for WordPress and WooCommerce

CVE-2026-116861

T−15d 30 oct. 2026
5,3 Media

CVE-2026-116862: falta de autorización en WP REST Cache

CVE-2026-116862

T−15d 30 oct. 2026
7,5 Alta

CVE-2026-39732: inyección SQL en Transliterator – Multilingual and Multi-script Text Conversion

CVE-2026-39732

T−15d 30 oct. 2026
8,1 Alta

CVE-2026-39738: deserialización de datos no fiables en FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce

CVE-2026-39738

T−15d 30 oct. 2026
4,3 Media

CVE-2026-54850: falta de autorización en Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment

CVE-2026-54850

T−15d 30 oct. 2026