Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 6,4 Media

    CVE-2026-118634: cross-site scripting (XSS) en Events Made Easy

    CVE-2026-118634

    T−16d 29 oct. 2026

  2. 6,5 Media

    CVE-2026-118698: inyección SQL en JoomSport – for Sports: Team & League, Football, Hockey & more

    CVE-2026-118698

    T−16d 29 oct. 2026

  3. — Baja

    CVE-2026-86198: vulnerabilidad en pocketmine/pocketmine-mp

    CVE-2026-86198 · GHSA-PG53-P7QP-65CV

    T−16d 29 oct. 2026

  4. — Media

    CVE-2026-55186: vulnerabilidad en silverstripe/mfa

    CVE-2026-55186 · GHSA-68WQ-PHQ7-P2VG

    T−16d 29 oct. 2026

  5. 6,5 Media

    CVE-2026-5461: vulnerabilidad en Forminator Forms – Contact Form, Payment Form & Custom Form Builder

    CVE-2026-5461

    T−16d 29 oct. 2026

  6. 8,8 Alta

    CVE-2026-104368: escape incorrecto de la salida en Export and Import Users and Customers

    CVE-2026-104368

    T−16d 29 oct. 2026

  7. 5,3 Media

    CVE-2026-48200: exposición de información sensible en Document Library Lite

    CVE-2026-48200

    T−16d 29 oct. 2026

  8. 6,4 Media

    CVE-2026-116848: cross-site scripting (XSS) en The Plus Addons for Elementor – Mega Menu, Header Footer, Post Grid, AI Widgets & Templates

    CVE-2026-116848

    T−16d 29 oct. 2026

  9. 4,3 Media

    CVE-2026-109891: falta de autorización en HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates

    CVE-2026-109891

    T−16d 29 oct. 2026

  10. 4,3 Media

    CVE-2026-25448: falta de autorización en ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce

    CVE-2026-25448

    T−16d 29 oct. 2026

  11. 4,3 Media

    CVE-2026-42691: falta de autorización en EventPrime – Events Calendar, Bookings, Tickets & AI

    CVE-2026-42691

    T−16d 29 oct. 2026

  12. 5,3 Media

    CVE-2026-54852: falta de autorización en Page and Post Restriction

    CVE-2026-54852

    T−16d 29 oct. 2026

  13. 5,3 Media

    CVE-2026-97073: falta de autorización en Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred

    CVE-2026-97073

    T−16d 29 oct. 2026

  14. 6,4 Media

    CVE-2026-118097: cross-site scripting (XSS) en HTML5 Video Player – embed fast, responsive videos with ease

    CVE-2026-118097

    T−16d 29 oct. 2026

  15. 4,3 Media

    CVE-2026-27062: falsificación de peticiones (CSRF) en WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell

    CVE-2026-27062

    T−16d 29 oct. 2026

  16. 5,3 Media

    CVE-2026-115601: falta de autorización en Custom Price for WooCommerce

    CVE-2026-115601

    T−16d 29 oct. 2026

  17. 5,3 Media

    CVE-2026-54853: falta de autorización en User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

    CVE-2026-54853

    T−16d 29 oct. 2026

  18. 5,3 Media

    CVE-2026-27063: falta de autorización en Kit (formerly ConvertKit) – Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership

    CVE-2026-27063

    T−16d 29 oct. 2026

  19. 6,4 Media

    CVE-2026-114706: cross-site scripting (XSS) en Strong Testimonials

    CVE-2026-114706

    T−16d 29 oct. 2026

  20. 6,4 Media

    CVE-2026-116850: cross-site scripting (XSS) en HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates

    CVE-2026-116850

    T−16d 29 oct. 2026

  21. 5,3 Media

    CVE-2026-25450: falta de autorización en User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

    CVE-2026-25450

    T−16d 29 oct. 2026

  22. 5,3 Media

    CVE-2026-114181: falta de autorización en E-cab Taxi Booking Manager for Woocommerce

    CVE-2026-114181

    T−16d 29 oct. 2026

  23. 5,3 Media

    CVE-2026-54871: falta de autorización en ShopBuilder – WooCommerce Builder For Elementor

    CVE-2026-54871

    T−16d 29 oct. 2026

  24. 4,3 Media

    CVE-2026-115605: falta de autorización en SureDash – Community, Courses & Member Dashboard

    CVE-2026-115605

    T−16d 29 oct. 2026

  25. 5,3 Media

    CVE-2026-118088: falta de autorización en WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell

    CVE-2026-118088

    T−16d 29 oct. 2026

  26. 6,4 Media

    CVE-2026-110881: cross-site scripting (XSS) en SureDash – Community, Courses & Member Dashboard

    CVE-2026-110881

    T−16d 29 oct. 2026

  27. 6,4 Media

    CVE-2026-116849: cross-site scripting (XSS) en StreamCast – bring live radio to your site with a sleek player

    CVE-2026-116849

    T−16d 29 oct. 2026

  28. 5,3 Media

    CVE-2026-116856: falta de autorización en Flexible Quantity & Price Calculator for WooCommerce

    CVE-2026-116856

    T−16d 29 oct. 2026

  29. 6,4 Media

    CVE-2026-39737: cross-site scripting (XSS) en JetElements

    CVE-2026-39737

    T−16d 29 oct. 2026

  30. 5,3 Media

    CVE-2026-116387: falta de autorización en SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz

    CVE-2026-116387

    T−16d 29 oct. 2026