Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 9,8 Crít.

    CVE-2026-104736: deserialización de datos no fiables en LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

    CVE-2026-104736

    T−28d 17 oct. 2026

  2. 5,3 Media

    CVE-2026-96902: exposición de información sensible en Easy Property Listings

    CVE-2026-96902

    T−29d 17 oct. 2026

  3. 8,1 Alta

    CVE-2026-111398: recorrido de rutas (path traversal) en MapSVG – Vector maps, Google Maps, Image maps – with AI assistant

    CVE-2026-111398

    T−29d 17 oct. 2026

  4. 4,3 Media

    CVE-2026-96903: exposición de información sensible en Easy Property Listings

    CVE-2026-96903

    T−29d 17 oct. 2026

  5. 5,4 Media

    CVE-2026-110253: recorrido de rutas (path traversal) en weForms – Easy Drag & Drop Contact Form Builder For WordPress

    CVE-2026-110253

    T−29d 16 oct. 2026

  6. 7,2 Alta

    CVE-2026-100316: cross-site scripting (XSS) en European VAT Compliance Assistant for WooCommerce

    CVE-2026-100316

    T−29d 16 oct. 2026

  7. 7,2 Alta

    CVE-2026-111110: cross-site scripting (XSS) en Payment forms, Buy now buttons, and Invoicing System | GetPaid

    CVE-2026-111110

    T−29d 16 oct. 2026

  8. 6,4 Media

    CVE-2026-109983: cross-site scripting (XSS) en YMC Filter

    CVE-2026-109983

    T−29d 16 oct. 2026

  9. 8,8 Alta

    CVE-2026-97380: vulnerabilidad en MariaDB

    CVE-2026-97380

    T−29d 16 oct. 2026

  10. 7,7 Alta

    CVE-2026-86047: inyección SQL en MariaDB

    CVE-2026-86047

    T−29d 16 oct. 2026

  11. 9,9 Crít.

    CVE-2026-92262: vulnerabilidad en MariaDB

    CVE-2026-92262

    T−29d 16 oct. 2026

  12. 4,3 Media

    CVE-2026-85745: vulnerabilidad en MariaDB

    CVE-2026-85745

    T−29d 16 oct. 2026

  13. 9,9 Crít.

    CVE-2026-85746: escritura fuera de límites en MariaDB

    CVE-2026-85746

    T−29d 16 oct. 2026

  14. 9,9 Crít.

    CVE-2026-85748: uso de memoria ya liberada en MariaDB

    CVE-2026-85748

    T−29d 16 oct. 2026

  15. 5,4 Media

    CVE-2026-85985: falta de autorización en MariaDB

    CVE-2026-85985

    T−29d 16 oct. 2026

  16. 4,3 Media

    CVE-2026-92715: acceso a datos de otros usuarios (IDOR) en Tutor LMS – eLearning and online course solution

    CVE-2026-92715

    T−29d 16 oct. 2026

  17. 6,4 Media

    CVE-2026-120524: cross-site scripting (XSS) en News Kit Addons For Elementor

    CVE-2026-120524

    T−29d 16 oct. 2026

  18. 6,4 Media

    CVE-2026-109985: cross-site scripting (XSS) en xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN

    CVE-2026-109985

    T−29d 16 oct. 2026

  19. 4,9 Media

    CVE-2026-110268: recorrido de rutas (path traversal) en Post Export Import with Media

    CVE-2026-110268

    T−29d 16 oct. 2026

  20. 8,1 Alta

    CVE-2026-92798: inyección de código en User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

    CVE-2026-92798

    T−29d 16 oct. 2026

  21. 4,3 Media

    CVE-2026-92978: falsificación de peticiones (CSRF) en User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

    CVE-2026-92978

    T−29d 16 oct. 2026

  22. 7,2 Alta

    CVE-2026-96660: cross-site scripting (XSS) en User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

    CVE-2026-96660

    T−29d 16 oct. 2026

  23. 6,8 Media

    CVE-2026-109369: falta de autorización en WP Booking System – Booking Calendar

    CVE-2026-109369

    T−29d 16 oct. 2026

  24. 6,5 Media

    CVE-2026-109368: falta de autorización en WP Booking System – Booking Calendar

    CVE-2026-109368

    T−29d 16 oct. 2026

  25. 7,5 Alta

    CVE-2026-108123: falta de autorización en WP Booking System – Booking Calendar

    CVE-2026-108123

    T−29d 16 oct. 2026

  26. 7,2 Alta

    CVE-2026-103899: cross-site scripting (XSS) en EU VAT Assistant for WooCommerce

    CVE-2026-103899

    T−29d 16 oct. 2026

  27. 6,4 Media

    CVE-2026-109989: cross-site scripting (XSS) en Themify Popup

    CVE-2026-109989

    T−29d 16 oct. 2026

  28. 6,4 Media

    CVE-2026-111726: cross-site scripting (XSS) en Themify Builder

    CVE-2026-111726

    T−29d 16 oct. 2026

  29. 4,9 Media

    CVE-2026-107752: inyección SQL en Welcart e-Commerce

    CVE-2026-107752

    T−29d 16 oct. 2026

  30. 6,5 Media

    CVE-2026-107744: falta de autorización en LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

    CVE-2026-107744

    T−29d 16 oct. 2026