[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

Tecnología Gravedad Sólo las que se están explotando

5,3 Media

CVE-2026-106028: falta de autorización en ActiveTrail for WooCommerce

CVE-2026-106028

T−30d 16 oct. 2026
4,3 Media

CVE-2026-107763: falta de autorización en Fastcache by Host.it

CVE-2026-107763

T−30d 16 oct. 2026
5,3 Media

CVE-2026-106010: falta de autorización en BDM Digital Payment Gateway

CVE-2026-106010

T−30d 16 oct. 2026
7,2 Alta

CVE-2026-107648: cross-site scripting (XSS) en WP Sessions Time Monitoring Full Automatic

CVE-2026-107648

T−30d 15 oct. 2026
5,4 Media

CVE-2026-107649: cross-site scripting (XSS) en Events Made Easy

CVE-2026-107649

T−30d 15 oct. 2026
6,4 Media

CVE-2026-110703: cross-site scripting (XSS) en GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

CVE-2026-110703

T−30d 15 oct. 2026
7,2 Alta

CVE-2026-96768: cross-site scripting (XSS) en GoSMTP Pro

CVE-2026-96768

T−30d 15 oct. 2026
— Alta

CVE-2026-85990: gestión incorrecta de privilegios en leantime/leantime

CVE-2026-85990 · GHSA-54MM-6729-R5WP

T−30d 15 oct. 2026
— Media

CVE-2026-62858: inclusión de ficheros en PHP en yourls/yourls

CVE-2026-62858 · GHSA-F8FF-652M-J5RX

T−30d 15 oct. 2026
8,8 Alta

CVE-2026-111311: subida de ficheros peligrosos en DoubleScale CRM | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More

CVE-2026-111311

T−30d 15 oct. 2026
— Alta

CVE-2026-104827: reserva de recursos sin límite en react/http

CVE-2026-104827 · GHSA-G4F2-2PF3-2PWJ

T−30d 15 oct. 2026
7,2 Alta

CVE-2026-109224: cross-site scripting (XSS) en SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments

CVE-2026-109224

T−30d 15 oct. 2026
6,4 Media

CVE-2026-104726: cross-site scripting (XSS) en Name Directory

CVE-2026-104726

T−30d 15 oct. 2026
5,4 Media

CVE-2026-104003: inyección de código en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-104003

T−30d 15 oct. 2026
7,5 Alta

CVE-2026-92766: inyección SQL en Vitepos – Point of Sale (POS) for WooCommerce

CVE-2026-92766

T−30d 15 oct. 2026
6,4 Media

CVE-2026-93681: cross-site scripting (XSS) en Tutor LMS – eLearning and online course solution

CVE-2026-93681

T−30d 15 oct. 2026
6,4 Media

CVE-2026-100108: cross-site scripting (XSS) en Social Share Buttons

CVE-2026-100108

T−30d 15 oct. 2026
7,2 Alta

CVE-2026-87111: cross-site scripting (XSS) en User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin

CVE-2026-87111

T−30d 15 oct. 2026
8,1 Alta

CVE-2026-75903: autenticación incorrecta en Vulnity Security

CVE-2026-75903

T−30d 15 oct. 2026
6,4 Media

CVE-2026-100106: cross-site scripting (XSS) en FiboSearch – Ajax Search for WooCommerce

CVE-2026-100106

T−30d 15 oct. 2026
6,4 Media

CVE-2026-96870: cross-site scripting (XSS) en SureDash – Community, Courses & Member Dashboard

CVE-2026-96870

T−30d 15 oct. 2026
9,8 Crít.

CVE-2026-104730: deserialización de datos no fiables en Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers

CVE-2026-104730

T−30d 15 oct. 2026
4,3 Media

CVE-2026-110361: exposición de información sensible en Infinite Uploads – Offload, Optimize & Organize Your Media Library

CVE-2026-110361

T−30d 15 oct. 2026
5,3 Media

CVE-2026-110362: falta de autorización en PlanetStudio Payment Gateway

CVE-2026-110362

T−30d 15 oct. 2026
4,3 Media

CVE-2026-110882: falta de autorización en SMS Alert – SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery

CVE-2026-110882

T−30d 15 oct. 2026
6,4 Media

CVE-2026-109893: cross-site scripting (XSS) en Presto Player

CVE-2026-109893

T−30d 15 oct. 2026
4,3 Media

CVE-2026-110374: falta de autorización en OTP Login With Phone Number, OTP Verification

CVE-2026-110374

T−30d 15 oct. 2026
5,3 Media

CVE-2026-108499: falta de autorización en Knowledge Base

CVE-2026-108499

T−30d 15 oct. 2026
6,4 Media

CVE-2026-110375: cross-site scripting (XSS) en Download Monitor

CVE-2026-110375

T−30d 15 oct. 2026
5,3 Media

CVE-2026-110364: falta de autorización en Flexible Quantity & Price Calculator for WooCommerce

CVE-2026-110364

T−30d 15 oct. 2026