Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 6,4 Media

    CVE-2026-116400: cross-site scripting (XSS) en Button Block – Stylish buttons that get more clicks

    CVE-2026-116400

    T−19d 26 oct. 2026

  2. 6,4 Media

    CVE-2026-116398: cross-site scripting (XSS) en Content Slider Block – Bring your content to life with slides

    CVE-2026-116398

    T−19d 26 oct. 2026

  3. 6,4 Media

    CVE-2026-116395: cross-site scripting (XSS) en All In One Lightbox – show any media in beautiful popups

    CVE-2026-116395

    T−19d 26 oct. 2026

  4. 5,3 Media

    CVE-2026-115598: falta de autorización en LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

    CVE-2026-115598

    T−19d 26 oct. 2026

  5. 4,3 Media

    CVE-2026-115597: falta de autorización en LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

    CVE-2026-115597

    T−19d 26 oct. 2026

  6. 6,4 Media

    CVE-2026-114710: cross-site scripting (XSS) en Gallery PhotoBlocks

    CVE-2026-114710

    T−19d 26 oct. 2026

  7. 5,3 Media

    CVE-2026-116388: falta de autorización en Booking for Appointments and Events Calendar – Amelia

    CVE-2026-116388

    T−19d 26 oct. 2026

  8. 6,4 Media

    CVE-2026-116396: cross-site scripting (XSS) en Booking for Appointments and Events Calendar – Amelia

    CVE-2026-116396

    T−19d 26 oct. 2026

  9. 7,2 Alta

    CVE-2026-111820: cross-site scripting (XSS) en Analytics Insights – Google Analytics Dashboard for WordPress

    CVE-2026-111820

    T−19d 26 oct. 2026

  10. 8,1 Alta

    CVE-2026-115968: deserialización de datos no fiables en Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    CVE-2026-115968

    T−19d 26 oct. 2026

  11. 7,5 Alta

    CVE-2026-116390: deserialización de datos no fiables en Filter Everything — WordPress & WooCommerce Filters

    CVE-2026-116390

    T−19d 26 oct. 2026

  12. 7,5 Alta

    CVE-2026-116389: deserialización de datos no fiables en Phoenix Media Rename

    CVE-2026-116389

    T−19d 26 oct. 2026

  13. 6,6 Media

    CVE-2026-115590: deserialización de datos no fiables en Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy

    CVE-2026-115590

    T−19d 26 oct. 2026

  14. 7,5 Alta

    CVE-2026-116391: deserialización de datos no fiables en Logo Slider – Logo Carousel, Logo Showcase, Logo Gallery & Client Logos

    CVE-2026-116391

    T−19d 26 oct. 2026

  15. 6,6 Media

    CVE-2026-116392: deserialización de datos no fiables en Accordions

    CVE-2026-116392

    T−19d 26 oct. 2026

  16. 8,1 Alta

    CVE-2026-62131: deserialización de datos no fiables en Zoho Flow – No-Code Workflow Automation

    CVE-2026-62131

    T−19d 26 oct. 2026

  17. 5,3 Media

    CVE-2026-116393: falta de autorización en Optima Express IDX

    CVE-2026-116393

    T−19d 26 oct. 2026

  18. 4,3 Media

    CVE-2026-116404: falta de autorización en Redux Framework

    CVE-2026-116404

    T−19d 26 oct. 2026

  19. 6,5 Media

    CVE-2026-111850: inyección SQL en BuddyPress

    CVE-2026-111850

    T−19d 26 oct. 2026

  20. 7,2 Alta

    CVE-2026-115612: cross-site scripting (XSS) en Affiliate Program Suite — SliceWP Affiliates

    CVE-2026-115612

    T−19d 26 oct. 2026

  21. 5,3 Media

    CVE-2026-115591: exposición de información sensible en Contact Form by Supsystic – Drag & Drop Form Builder with Templates & Form Statistics

    CVE-2026-115591

    T−19d 26 oct. 2026

  22. 6,1 Media

    CVE-2026-115593: cross-site scripting (XSS) en Unlimited Elements for Elementor

    CVE-2026-115593

    T−19d 26 oct. 2026

  23. 7,5 Alta

    CVE-2026-111411: inyección SQL en FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce

    CVE-2026-111411

    T−19d 26 oct. 2026

  24. 6,1 Media

    CVE-2026-115596: cross-site scripting (XSS) en eCommerce Product Catalog

    CVE-2026-115596

    T−19d 26 oct. 2026

  25. 6,4 Media

    CVE-2026-115957: cross-site scripting (XSS) en Discussion Board – WordPress Forum Plugin

    CVE-2026-115957

    T−19d 26 oct. 2026

  26. 7,5 Alta

    CVE-2026-115607: inyección SQL en DXP ToolKit

    CVE-2026-115607

    T−19d 26 oct. 2026

  27. 7,2 Alta

    CVE-2026-115606: cross-site scripting (XSS) en DXP ToolKit

    CVE-2026-115606

    T−19d 26 oct. 2026

  28. 7,2 Alta

    CVE-2026-115609: cross-site scripting (XSS) en Payment forms, Buy now buttons, and Invoicing System | GetPaid

    CVE-2026-115609

    T−19d 26 oct. 2026

  29. 6,4 Media

    CVE-2026-114708: cross-site scripting (XSS) en JetSmartFilters

    CVE-2026-114708

    T−19d 26 oct. 2026

  30. 5,3 Media

    CVE-2026-115959: falta de autorización en WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce

    CVE-2026-115959

    T−19d 26 oct. 2026