Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 5,3 Media

    CVE-2026-118091: falta de autorización en WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell

    CVE-2026-118091

    T−16d 29 oct. 2026

  2. 6,4 Media

    CVE-2026-39742: cross-site scripting (XSS) en Kadence Blocks — Page Builder Toolkit for Gutenberg Editor

    CVE-2026-39742

    T−16d 29 oct. 2026

  3. 6,4 Media

    CVE-2026-115610: cross-site scripting (XSS) en Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors

    CVE-2026-115610

    T−16d 29 oct. 2026

  4. 4,3 Media

    CVE-2026-118092: falta de autorización en MasterStudy LMS WordPress Plugin – for Online Courses and Education

    CVE-2026-118092

    T−16d 29 oct. 2026

  5. 4,3 Media

    CVE-2026-116406: falta de autorización en Easy Appointment Booking & Scheduling Plugin – Webba Booking Calendar

    CVE-2026-116406

    T−16d 29 oct. 2026

  6. 4,3 Media

    CVE-2026-52708: falta de autorización en User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

    CVE-2026-52708

    T−16d 29 oct. 2026

  7. 5,3 Media

    CVE-2026-116846: falta de autorización en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

    CVE-2026-116846

    T−16d 29 oct. 2026

  8. 5,3 Media

    CVE-2026-48884: falta de autorización en User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

    CVE-2026-48884

    T−16d 29 oct. 2026

  9. 6,5 Media

    CVE-2026-39736: inyección SQL en JetEngine

    CVE-2026-39736

    T−16d 29 oct. 2026

  10. 5,3 Media

    CVE-2026-39782: falta de autorización en Kali Forms — Contact Form & Drag-and-Drop Builder

    CVE-2026-39782

    T−16d 29 oct. 2026

  11. 4,3 Media

    CVE-2026-116399: falsificación de peticiones (CSRF) en InstaWP Connect – 1-click WP Staging & Migration

    CVE-2026-116399

    T−16d 29 oct. 2026

  12. 6,4 Media

    CVE-2026-116857: cross-site scripting (XSS) en JetSmartFilters

    CVE-2026-116857

    T−16d 29 oct. 2026

  13. 6,4 Media

    CVE-2026-54862: cross-site scripting (XSS) en Import and export users and customers

    CVE-2026-54862

    T−16d 29 oct. 2026

  14. 4,3 Media

    CVE-2026-42707: falta de autorización en HivePress Claim Listings

    CVE-2026-42707

    T−16d 29 oct. 2026

  15. 6,4 Media

    CVE-2026-48195: cross-site scripting (XSS) en PDF Poster – Let visitors read PDF’s without leaving the page

    CVE-2026-48195

    T−16d 29 oct. 2026

  16. 5,3 Media

    CVE-2026-39741: falta de autorización en Simple CAPTCHA with Cloudflare Turnstile

    CVE-2026-39741

    T−16d 29 oct. 2026

  17. 6,4 Media

    CVE-2026-48196: cross-site scripting (XSS) en Kali Forms — Contact Form & Drag-and-Drop Builder

    CVE-2026-48196

    T−16d 29 oct. 2026

  18. 4,3 Media

    CVE-2026-22386: falta de autorización en WP Job Portal – AI-Powered Recruitment System for Company or Job Board website

    CVE-2026-22386

    T−16d 29 oct. 2026

  19. 6,4 Media

    CVE-2026-52709: cross-site scripting (XSS) en Video Gallery Block – showcase your videos in a filterable gallery

    CVE-2026-52709

    T−16d 29 oct. 2026

  20. 6,4 Media

    CVE-2026-24533: cross-site scripting (XSS) en Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox

    CVE-2026-24533

    T−16d 29 oct. 2026

  21. 4,3 Media

    CVE-2026-42703: falta de autorización en Kali Forms — Contact Form & Drag-and-Drop Builder

    CVE-2026-42703

    T−16d 29 oct. 2026

  22. 6,4 Media

    CVE-2026-118087: cross-site scripting (XSS) en Site Reviews

    CVE-2026-118087

    T−16d 29 oct. 2026

  23. 6,4 Media

    CVE-2026-118094: cross-site scripting (XSS) en Ad Inserter – Ad Manager & AdSense Ads

    CVE-2026-118094

    T−16d 29 oct. 2026

  24. 4,3 Media

    CVE-2026-39735: falta de autorización en JetEngine

    CVE-2026-39735

    T−16d 29 oct. 2026

  25. 6,4 Media

    CVE-2026-56056: cross-site scripting (XSS) en The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid

    CVE-2026-56056

    T−16d 29 oct. 2026

  26. 5,3 Media

    CVE-2026-118093: falta de autorización en Product Feed Manager for WooCommerce – RexFeed – Sell on 200+ Shopping Channels

    CVE-2026-118093

    T−16d 29 oct. 2026

  27. 5,3 Media

    CVE-2026-27401: falta de autorización en YITH PayPal Express Checkout for WooCommerce

    CVE-2026-27401

    T−16d 29 oct. 2026

  28. 4,3 Media

    CVE-2026-80067: recorrido de rutas (path traversal) en MasterStudy LMS WordPress Plugin – for Online Courses and Education

    CVE-2026-80067

    T−16d 29 oct. 2026

  29. 3,5 Baja

    Vulnerabilidad en WordPress

    T−16d 29 oct. 2026

  30. 5,3 Media

    CVE-2026-103310: vulnerabilidad en PayHere Payment Gateway

    CVE-2026-103310

    T−16d 29 oct. 2026