Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 6,4 Media

    CVE-2026-114693: cross-site scripting (XSS) en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

    CVE-2026-114693

    T−23d 22 oct. 2026

  2. 4,3 Media

    CVE-2026-110892: falta de autorización en SureDash – Community, Courses & Member Dashboard

    CVE-2026-110892

    T−23d 22 oct. 2026

  3. 7,2 Alta

    CVE-2026-114697: cross-site scripting (XSS) en QA Assistants – Driven by data

    CVE-2026-114697

    T−23d 22 oct. 2026

  4. 7,2 Alta

    CVE-2026-114178: cross-site scripting (XSS) en W3 Total Cache

    CVE-2026-114178

    T−23d 22 oct. 2026

  5. 6,4 Media

    CVE-2026-112845: cross-site scripting (XSS) en Off-Canvas Sidebars & Menus (Slidebars)

    CVE-2026-112845

    T−23d 22 oct. 2026

  6. 5,3 Media

    CVE-2026-110893: falta de autorización en SureDash – Community, Courses & Member Dashboard

    CVE-2026-110893

    T−23d 22 oct. 2026

  7. 5,3 Media

    CVE-2026-110894: falta de autorización en SureDash – Community, Courses & Member Dashboard

    CVE-2026-110894

    T−23d 22 oct. 2026

  8. 5,3 Media

    CVE-2026-114190: exposición de información sensible en LiteSpeed Cache

    CVE-2026-114190

    T−23d 22 oct. 2026

  9. 7,5 Alta

    CVE-2026-112866: inyección SQL en Product Filter for WooCommerce by WBW

    CVE-2026-112866

    T−23d 22 oct. 2026

  10. 8,1 Alta

    CVE-2026-94075: deserialización de datos no fiables en Newsletters

    CVE-2026-94075

    T−23d 22 oct. 2026

  11. 6,1 Media

    CVE-2026-112869: cross-site scripting (XSS) en We’re Open!

    CVE-2026-112869

    T−23d 22 oct. 2026

  12. 7,5 Alta

    CVE-2026-111402: inyección SQL en Newsletters

    CVE-2026-111402

    T−23d 22 oct. 2026

  13. 7,2 Alta

    CVE-2026-112844: cross-site scripting (XSS) en Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce

    CVE-2026-112844

    T−23d 22 oct. 2026

  14. 4,3 Media

    CVE-2026-114182: falta de autorización en PowerPack Addons for Elementor: Widgets, Form Styler and Templates

    CVE-2026-114182

    T−23d 22 oct. 2026

  15. 4,3 Media

    CVE-2026-112843: falta de autorización en Strong Testimonials

    CVE-2026-112843

    T−23d 22 oct. 2026

  16. 5,3 Media

    CVE-2026-112826: falta de autorización en Falcon – Cache, Performance, Security, Cleanup, and Tweaks

    CVE-2026-112826

    T−23d 22 oct. 2026

  17. 4,3 Media

    CVE-2026-111847: falta de autorización en MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution

    CVE-2026-111847

    T−23d 22 oct. 2026

  18. 5,3 Media

    CVE-2026-114180: falta de autorización en MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor

    CVE-2026-114180

    T−23d 22 oct. 2026

  19. 4,3 Media

    CVE-2026-114177: falsificación de peticiones (CSRF) en Xpro Addons — 150+ Widgets for Elementor

    CVE-2026-114177

    T−23d 22 oct. 2026

  20. 6,4 Media

    CVE-2026-112867: cross-site scripting (XSS) en Interactive Content – H5P

    CVE-2026-112867

    T−23d 22 oct. 2026

  21. 6,4 Media

    CVE-2026-114184: cross-site scripting (XSS) en Addon Elements for Elementor (formerly Elementor Addon Elements)

    CVE-2026-114184

    T−23d 22 oct. 2026

  22. 6,4 Media

    CVE-2026-105199: cross-site scripting (XSS) en Pixel Tag Manager for WooCommerce – Google Analytics 4, Google Ads, and More Pixels

    CVE-2026-105199

    T−24d 22 oct. 2026

  23. 6,5 Media

    CVE-2026-113491: recorrido de rutas (path traversal) en GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

    CVE-2026-113491

    T−24d 22 oct. 2026

  24. 6,4 Media

    CVE-2026-113493: cross-site scripting (XSS) en GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

    CVE-2026-113493

    T−24d 22 oct. 2026

  25. 4,3 Media

    CVE-2026-88849: falta de autorización en MasterStudy LMS WordPress Plugin – for Online Courses and Education

    CVE-2026-88849

    T−24d 22 oct. 2026

  26. 6,1 Media

    CVE-2026-112207: cross-site scripting (XSS) en Download Monitor

    CVE-2026-112207

    T−24d 22 oct. 2026

  27. 7,2 Alta

    CVE-2026-114179: cross-site scripting (XSS) en Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots

    CVE-2026-114179

    T−24d 22 oct. 2026

  28. 5,3 Media

    CVE-2026-110956: autenticación incorrecta en asVereinbase – Club & Member Management for WP

    CVE-2026-110956

    T−24d 22 oct. 2026

  29. 5,3 Media

    CVE-2026-94295: falta de autorización en Chikkili- Google Pay India for Woocommerce

    CVE-2026-94295

    T−24d 22 oct. 2026

  30. 9,8 Crít.

    CVE-2026-102785: subida de ficheros peligrosos en YOOtheme Pro

    CVE-2026-102785

    T−24d 22 oct. 2026