[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

Tecnología Gravedad Sólo las que se están explotando

5,3 Media

CVE-2026-118638: falta de autorización en Mapster WP Maps

CVE-2026-118638

T−16d 29 oct. 2026
5,3 Media

CVE-2026-94361: falta de autorización en Payable Payment Gateway for WooCommerce

CVE-2026-94361

T−16d 29 oct. 2026
3,5 Baja

Vulnerabilidad en WordPress

T−16d 29 oct. 2026
6,4 Media

Cross-site scripting (XSS) en WordPress

T−16d 29 oct. 2026
6,4 Media

CVE-2026-118989: falsificación de peticiones del servidor (SSRF) en Product Import Export for WooCommerce – CSV Product Importer & Exporter

CVE-2026-118989

T−16d 29 oct. 2026
6,3 Media

CVE-2026-110808: gestión incorrecta de privilegios en Essential Addons for Elementor – Popular Elementor Templates & Widgets

CVE-2026-110808

T−16d 29 oct. 2026
5,3 Media

CVE-2026-118629: exposición de información sensible en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2026-118629

T−16d 29 oct. 2026
7,2 Alta

CVE-2026-115821: cross-site scripting (XSS) en NewsmanApp

CVE-2026-115821

T−16d 28 oct. 2026
5,3 Media

CVE-2026-92086: exposición de información sensible en MW WP Form

CVE-2026-92086

T−16d 28 oct. 2026
4,9 Media

CVE-2026-109216: cross-site scripting (XSS) en Meta Box – A Framework for Dynamic Websites

CVE-2026-109216

T−16d 28 oct. 2026
7,5 Alta

CVE-2026-110184: inyección SQL en Newsmatic

CVE-2026-110184

T−16d 28 oct. 2026
7,2 Alta

CVE-2026-96767: cross-site scripting (XSS) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2026-96767

T−16d 28 oct. 2026
4,7 Media

CVE-2026-103875: cross-site scripting (XSS) en Media Library Assistant

CVE-2026-103875

T−17d 28 oct. 2026
7,2 Alta

CVE-2026-107743: cross-site scripting (XSS) en Mapster WP Maps

CVE-2026-107743

T−17d 28 oct. 2026
5,4 Media

CVE-2026-111318: cross-site scripting (XSS) en HT Mega Addons for Elementor – Elementor Widgets & Template Builder

CVE-2026-111318

T−17d 28 oct. 2026
6,4 Media

CVE-2026-109215: cross-site scripting (XSS) en LiteSpeed Cache

CVE-2026-109215

T−17d 28 oct. 2026
5,4 Media

CVE-2026-116763: cross-site scripting (XSS) en LiteSpeed Cache

CVE-2026-116763

T−17d 28 oct. 2026
5,4 Media

CVE-2026-107629: cross-site scripting (XSS) en Greenshift – animation and page builder blocks

CVE-2026-107629

T−17d 28 oct. 2026
5,4 Media

CVE-2026-107627: cross-site scripting (XSS) en Greenshift – animation and page builder blocks

CVE-2026-107627

T−17d 28 oct. 2026
4,7 Media

CVE-2026-110707: cross-site scripting (XSS) en RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator

CVE-2026-110707

T−17d 28 oct. 2026
5,4 Media

CVE-2026-103485: cross-site scripting (XSS) en Extensions for Leaflet Map

CVE-2026-103485

T−17d 28 oct. 2026
6,1 Media

CVE-2026-91152: cross-site scripting (XSS) en Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI

CVE-2026-91152

T−17d 28 oct. 2026
5,3 Media

CVE-2026-91153: exposición de información sensible en Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI

CVE-2026-91153

T−17d 28 oct. 2026
6,5 Media

CVE-2026-118192: inyección SQL en JoomSport – for Sports: Team & League, Football, Hockey & more

CVE-2026-118192

T−17d 28 oct. 2026
6,4 Media

CVE-2026-104727: cross-site scripting (XSS) en Sequential Order Numbers for WooCommerce

CVE-2026-104727

T−17d 28 oct. 2026
6,4 Media

CVE-2026-93293: cross-site scripting (XSS) en Password Protected

CVE-2026-93293

T−17d 28 oct. 2026
7,2 Alta

CVE-2026-96666: cross-site scripting (XSS) en Schema App Structured Data

CVE-2026-96666

T−17d 28 oct. 2026
7,2 Alta

CVE-2026-96741: cross-site scripting (XSS) en DSGVO All in one for WP

CVE-2026-96741

T−17d 28 oct. 2026
7,2 Alta

CVE-2026-96669: cross-site scripting (XSS) en Food Store – Online Food Delivery & Pickup

CVE-2026-96669

T−17d 28 oct. 2026
7,5 Alta

CVE-2026-93855: inyección SQL en SendPress Newsletters

CVE-2026-93855

T−17d 28 oct. 2026