Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. — Media

    CVE-2026-108360: autorización incorrecta en phpoffice/phpspreadsheet

    CVE-2026-108360 · GHSA-2PHH-27FW-Q4GC

    T−18d 27 oct. 2026

  2. — Alta

    CVE-2026-108359: consumo de recursos sin control en phpoffice/phpspreadsheet

    CVE-2026-108359 · GHSA-J2W7-387V-M2RQ

    T−18d 27 oct. 2026

  3. — Alta

    CVE-2026-108358: entidades externas XML (XXE) en phpoffice/phpspreadsheet

    CVE-2026-108358 · GHSA-3X94-M842-937C

    T−18d 27 oct. 2026

  4. — Alta

    CVE-2026-108357: entidades externas XML (XXE) en phpoffice/phpspreadsheet

    CVE-2026-108357 · GHSA-RXJ4-H86G-25GC

    T−18d 27 oct. 2026

  5. 6,4 Media

    CVE-2026-111727: cross-site scripting (XSS) en Appointment Booking Calendar

    CVE-2026-111727

    T−18d 27 oct. 2026

  6. 7,5 Alta

    CVE-2026-111255: subida de ficheros peligrosos en affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display

    CVE-2026-111255

    T−18d 27 oct. 2026

  7. 7,5 Alta

    CVE-2026-116613: falta de autorización en Animated Text Block – Add Typing and Looping Text Effects

    CVE-2026-116613

    T−18d 27 oct. 2026

  8. 6,4 Media

    CVE-2026-109209: cross-site scripting (XSS) en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

    CVE-2026-109209

    T−18d 27 oct. 2026

  9. 4,2 Media

    CVE-2026-107745: recorrido de rutas (path traversal) en AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini

    CVE-2026-107745

    T−18d 27 oct. 2026

  10. 7,2 Alta

    CVE-2026-109999: cross-site scripting (XSS) en AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot

    CVE-2026-109999

    T−18d 27 oct. 2026

  11. 6,4 Media

    CVE-2026-109974: cross-site scripting (XSS) en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

    CVE-2026-109974

    T−18d 27 oct. 2026

  12. 7,2 Alta

    CVE-2026-97019: cross-site scripting (XSS) en AMP for WP – Accelerated Mobile Pages

    CVE-2026-97019

    T−18d 27 oct. 2026

  13. 5,3 Media

    CVE-2026-120578: falta de autorización en AI Alt Text Generator

    CVE-2026-120578

    T−18d 27 oct. 2026

  14. 7,2 Alta

    CVE-2026-111314: cross-site scripting (XSS) en affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display

    CVE-2026-111314

    T−18d 27 oct. 2026

  15. 9,8 Crít.

    CVE-2026-84999: subida de ficheros peligrosos en Pie Register Premium

    CVE-2026-84999

    T−18d 27 oct. 2026

  16. 6,4 Media

    CVE-2026-107625: cross-site scripting (XSS) en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2026-107625

    T−18d 27 oct. 2026

  17. — Alta

    CVE-2026-33944: inyección SQL en dolibarr/dolibarr

    CVE-2026-33944 · GHSA-V5FQ-CF5M-VWV7

    T−18d 27 oct. 2026

  18. 9,8 Crít.

    CVE-2026-106013: autenticación incorrecta en Jupiter X Core

    CVE-2026-106013

    T−18d 27 oct. 2026

  19. 6,1 Media

    CVE-2026-115611: cross-site scripting (XSS) en TableOn – WordPress Posts Table Filterable 

    CVE-2026-115611

    T−18d 27 oct. 2026

  20. 7,5 Alta

    CVE-2026-115964: inyección SQL en Motors – Car Dealership & Classified Listings Plugin

    CVE-2026-115964

    T−18d 27 oct. 2026

  21. 6,1 Media

    CVE-2026-116409: cross-site scripting (XSS) en Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups.

    CVE-2026-116409

    T−18d 27 oct. 2026

  22. 6,1 Media

    CVE-2026-115592: cross-site scripting (XSS) en OceanWP

    CVE-2026-115592

    T−18d 27 oct. 2026

  23. 5,3 Media

    CVE-2026-114193: falta de autorización en GEO my WP

    CVE-2026-114193

    T−18d 27 oct. 2026

  24. 4,3 Media

    CVE-2026-112827: falta de autorización en HANDMADE – Dropshipping for Etsy and WooCommerce

    CVE-2026-112827

    T−18d 27 oct. 2026

  25. 5,3 Media

    CVE-2026-115599: falta de autorización en LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

    CVE-2026-115599

    T−18d 27 oct. 2026

  26. 6,5 Media

    CVE-2026-115965: inyección SQL en BuddyPress

    CVE-2026-115965

    T−18d 27 oct. 2026

  27. 4,3 Media

    CVE-2026-115963: falta de autorización en Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP

    CVE-2026-115963

    T−18d 27 oct. 2026

  28. 5,3 Media

    CVE-2026-108686: exposición de información sensible en WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars

    CVE-2026-108686

    T−18d 27 oct. 2026

  29. 8,1 Alta

    CVE-2026-103693: deserialización de datos no fiables en ProfileGrid – User Profiles, Groups and Communities y Frontend Dashboard

    CVE-2026-103693

    T−18d 27 oct. 2026

  30. 4,3 Media

    CVE-2026-85007: falta de autorización en Video Player for YouTube – Embed Videos Your Visitors Will Love to Watch

    CVE-2026-85007

    T−18d 27 oct. 2026