Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 4,3 Media

    CVE-2026-114741: acceso a datos de otros usuarios (IDOR) en WPVR – 360 Panorama viewer and Virtual Tour Builder for WordPress

    CVE-2026-114741

    T−22d 23 oct. 2026

  2. 5,3 Media

    CVE-2026-111976: exposición de información sensible en GiveWP – Donation Plugin and Fundraising Platform

    CVE-2026-111976

    T−22d 23 oct. 2026

  3. 4,3 Media

    CVE-2026-114743: falta de autorización en InstaWP Connect – 1-click WP Staging & Migration

    CVE-2026-114743

    T−22d 23 oct. 2026

  4. 5,3 Media

    CVE-2026-103306: vulnerabilidad en Online Payments with iK Pay Gateway

    CVE-2026-103306

    T−22d 23 oct. 2026

  5. 6,4 Media

    CVE-2026-111979: cross-site scripting (XSS) en GiveWP – Donation Plugin and Fundraising Platform

    CVE-2026-111979

    T−22d 23 oct. 2026

  6. 4,3 Media

    CVE-2026-113501: falta de autorización en LiteSpeed Cache

    CVE-2026-113501

    T−22d 23 oct. 2026

  7. 7,2 Alta

    CVE-2026-109936: cross-site scripting (XSS) en Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE

    CVE-2026-109936

    T−22d 23 oct. 2026

  8. 5,3 Media

    CVE-2026-103298: falta de autorización en CCAvenue Payment Gateway for WooCommerce

    CVE-2026-103298

    T−22d 23 oct. 2026

  9. 7,2 Alta

    CVE-2026-113500: cross-site scripting (XSS) en LiteSpeed Cache

    CVE-2026-113500

    T−22d 23 oct. 2026

  10. 6,4 Media

    CVE-2026-109933: cross-site scripting (XSS) en Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE

    CVE-2026-109933

    T−22d 23 oct. 2026

  11. 5,3 Media

    CVE-2026-112230: falta de autorización en Popup Builder – Create highly converting, mobile friendly marketing popups.

    CVE-2026-112230

    T−22d 23 oct. 2026

  12. 9,8 Crít.

    CVE-2026-115806: deserialización de datos no fiables en Prime Mover – Backup and Migration

    CVE-2026-115806

    T−23d 22 oct. 2026

  13. 7,2 Alta

    CVE-2026-109198: cross-site scripting (XSS) en Anti-Spam, Spam FireWall by CleanTalk

    CVE-2026-109198

    T−23d 22 oct. 2026

  14. 5,3 Media

    CVE-2026-114191: falta de autorización en UPI QR Code Payment Gateway for WooCommerce

    CVE-2026-114191

    T−23d 22 oct. 2026

  15. 6,6 Media

    CVE-2026-114704: deserialización de datos no fiables en Relevanssi – A Better Search

    CVE-2026-114704

    T−23d 22 oct. 2026

  16. 5,3 Media

    CVE-2026-114192: falta de autorización en Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar

    CVE-2026-114192

    T−23d 22 oct. 2026

  17. 5,3 Media

    CVE-2026-114705: falta de autorización en Social Feed Gallery

    CVE-2026-114705

    T−23d 22 oct. 2026

  18. 6,4 Media

    CVE-2026-114703: cross-site scripting (XSS) en Extensions for Leaflet Map

    CVE-2026-114703

    T−23d 22 oct. 2026

  19. 6,4 Media

    CVE-2026-114702: cross-site scripting (XSS) en ND Shortcodes

    CVE-2026-114702

    T−23d 22 oct. 2026

  20. 6,4 Media

    CVE-2026-114701: cross-site scripting (XSS) en Waitlist Woocommerce ( Back in stock notifier )

    CVE-2026-114701

    T−23d 22 oct. 2026

  21. 6,4 Media

    CVE-2026-114700: cross-site scripting (XSS) en Restaurant Menu – Food Ordering System – Table Reservation

    CVE-2026-114700

    T−23d 22 oct. 2026

  22. 5,3 Media

    CVE-2026-114699: falta de autorización en ЮKassa для WooCommerce

    CVE-2026-114699

    T−23d 22 oct. 2026

  23. 5,3 Media

    CVE-2026-114195: exposición de información sensible en ShopMagic – email automation for WordPress

    CVE-2026-114195

    T−23d 22 oct. 2026

  24. 6,1 Media

    CVE-2026-114194: cross-site scripting (XSS) en Ad Inserter – Ad Manager & AdSense Ads

    CVE-2026-114194

    T−23d 22 oct. 2026

  25. 5,3 Media

    CVE-2026-114696: falta de autorización en Page and Post Restriction

    CVE-2026-114696

    T−23d 22 oct. 2026

  26. 5,3 Media

    CVE-2026-112218: falta de autorización en Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin

    CVE-2026-112218

    T−23d 22 oct. 2026

  27. 5,3 Media

    CVE-2026-111842: falta de autorización en Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers

    CVE-2026-111842

    T−23d 22 oct. 2026

  28. 8,1 Alta

    CVE-2026-114196: deserialización de datos no fiables en Paytium: Mollie payment forms & donations

    CVE-2026-114196

    T−23d 22 oct. 2026

  29. 7,2 Alta

    CVE-2026-114695: cross-site scripting (XSS) en VOD Infomaniak

    CVE-2026-114695

    T−23d 22 oct. 2026

  30. 6,1 Media

    CVE-2026-114694: cross-site scripting (XSS) en Events Manager – Calendar, Bookings, Tickets, Appointments and more!

    CVE-2026-114694

    T−23d 22 oct. 2026