Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 6,4 Media

    CVE-2026-107710: cross-site scripting (XSS) en Hustle – Email Marketing, Lead Generation, Optins, Popups

    CVE-2026-107710

    T−18d 27 oct. 2026

  2. 6,5 Media

    CVE-2026-116750: inyección SQL en VikRentCar Car Rental Management System

    CVE-2026-116750

    T−18d 27 oct. 2026

  3. 4,3 Media

    CVE-2026-109979: falta de autorización en Related Posts for WordPress

    CVE-2026-109979

    T−18d 27 oct. 2026

  4. 4,9 Media

    CVE-2026-118169: cross-site scripting (XSS) en Hustle – Email Marketing, Lead Generation, Optins, Popups

    CVE-2026-118169

    T−18d 27 oct. 2026

  5. 4,3 Media

    CVE-2026-109980: falta de autorización en Related Posts for WordPress

    CVE-2026-109980

    T−18d 27 oct. 2026

  6. 6,4 Media

    CVE-2026-104729: cross-site scripting (XSS) en Avada (Fusion) Builder

    CVE-2026-104729

    T−18d 27 oct. 2026

  7. 6,4 Media

    CVE-2026-109975: cross-site scripting (XSS) en Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox

    CVE-2026-109975

    T−18d 27 oct. 2026

  8. 5,9 Media

    CVE-2026-110185: inclusión de ficheros en PHP en Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More

    CVE-2026-110185

    T−18d 27 oct. 2026

  9. 6,5 Media

    CVE-2026-116609: inyección SQL en WP Visitor Statistics (Real Time Traffic)

    CVE-2026-116609

    T−18d 27 oct. 2026

  10. 4,4 Media

    CVE-2026-109988: cross-site scripting (XSS) en Product Addons for Woocommerce – Product Options with Custom Fields

    CVE-2026-109988

    T−18d 27 oct. 2026

  11. 6,5 Media

    CVE-2026-110020: falta de autorización en Rich Showcase for Google Reviews

    CVE-2026-110020

    T−18d 27 oct. 2026

  12. 6,4 Media

    CVE-2026-77188: cross-site scripting (XSS) en Waitlist Woocommerce ( Back in stock notifier )

    CVE-2026-77188

    T−18d 27 oct. 2026

  13. 6,4 Media

    CVE-2026-109590: cross-site scripting (XSS) en Travelly – Tour & Travel Booking Manager for WooCommerce

    CVE-2026-109590

    T−18d 27 oct. 2026

  14. 6,4 Media

    CVE-2026-109385: cross-site scripting (XSS) en UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks

    CVE-2026-109385

    T−18d 27 oct. 2026

  15. 4,3 Media

    CVE-2026-111213: falta de autorización en Travelly – Tour & Travel Booking Manager for WooCommerce

    CVE-2026-111213

    T−18d 27 oct. 2026

  16. 6,4 Media

    CVE-2026-109972: cross-site scripting (XSS) en s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions

    CVE-2026-109972

    T−18d 27 oct. 2026

  17. 6,4 Media

    CVE-2026-77871: cross-site scripting (XSS) en Post Snippets – Custom WordPress Code Snippets Customizer

    CVE-2026-77871

    T−18d 27 oct. 2026

  18. 4,9 Media

    CVE-2026-104743: recorrido de rutas (path traversal) en Tainacan

    CVE-2026-104743

    T−18d 27 oct. 2026

  19. 7,2 Alta

    CVE-2026-109381: gestión incorrecta de privilegios en Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar

    CVE-2026-109381

    T−18d 27 oct. 2026

  20. 7,2 Alta

    CVE-2026-110662: cross-site scripting (XSS) en MxChat – AI Chatbot & Content Generation for WordPress

    CVE-2026-110662

    T−18d 27 oct. 2026

  21. 6,4 Media

    CVE-2026-110071: cross-site scripting (XSS) en Mang Board

    CVE-2026-110071

    T−18d 27 oct. 2026

  22. 6,4 Media

    CVE-2026-104740: cross-site scripting (XSS) en If-So Dynamic Content – Elementor & All Page Builders Personalization

    CVE-2026-104740

    T−18d 27 oct. 2026

  23. 6,4 Media

    CVE-2026-118164: cross-site scripting (XSS) en If-So Dynamic Content – Elementor & All Page Builders Personalization

    CVE-2026-118164

    T−18d 27 oct. 2026

  24. 6,4 Media

    CVE-2026-108366: cross-site scripting (XSS) en easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution

    CVE-2026-108366

    T−18d 27 oct. 2026

  25. 4,4 Media

    CVE-2026-111068: cross-site scripting (XSS) en DesignSetGo

    CVE-2026-111068

    T−18d 27 oct. 2026

  26. 6,4 Media

    CVE-2026-109370: cross-site scripting (XSS) en Document Embedder – let visitors read files without downloading

    CVE-2026-109370

    T−18d 27 oct. 2026

  27. 4,3 Media

    CVE-2026-116610: falta de autorización en Clean Login

    CVE-2026-116610

    T−18d 27 oct. 2026

  28. 4,8 Media

    CVE-2026-109236: autenticación incorrecta en Customer Email Verification for WooCommerce – OTP Verification, Block Fake Signups

    CVE-2026-109236

    T−18d 27 oct. 2026

  29. 7,5 Alta

    CVE-2026-15323: recorrido de rutas (path traversal) en Product Designer for WooCommerce WordPress | Lumise

    CVE-2026-15323

    T−18d 27 oct. 2026

  30. 4,3 Media

    CVE-2026-116863: falsificación de peticiones (CSRF) en Newsletters

    CVE-2026-116863

    T−18d 27 oct. 2026