Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 5,3 Media

    CVE-2026-109689: falta de autorización en Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers

    CVE-2026-109689

    T−30d 15 oct. 2026

  2. 5,3 Media

    CVE-2026-110360: falta de autorización en Ajax Search Lite – Live Search & Filter

    CVE-2026-110360

    T−30d 15 oct. 2026

  3. 4,3 Media

    CVE-2026-109897: falta de autorización en Strong Testimonials

    CVE-2026-109897

    T−30d 15 oct. 2026

  4. 5,3 Media

    CVE-2026-110378: falta de autorización en Ninja Forms Signature Contract Add-On

    CVE-2026-110378

    T−30d 15 oct. 2026

  5. 5,3 Media

    CVE-2026-96449: falta de autorización en WP Easy Pay – Payment and Donation Form Builder for Square

    CVE-2026-96449

    T−30d 15 oct. 2026

  6. 6,4 Media

    CVE-2026-106604: cross-site scripting (XSS) en YITH WooCommerce Compare

    CVE-2026-106604

    T−30d 15 oct. 2026

  7. 4,3 Media

    CVE-2026-103083: acceso a datos de otros usuarios (IDOR) en ELEX WooCommerce Bulk Edit Products, Prices & Attributes (Basic)

    CVE-2026-103083

    T−30d 15 oct. 2026

  8. 6,4 Media

    CVE-2026-111069: cross-site scripting (XSS) en GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

    CVE-2026-111069

    T−30d 15 oct. 2026

  9. 7,2 Alta

    CVE-2026-107768: cross-site scripting (XSS) en TranslatePress – Translate Multilingual sites with AI Translation

    CVE-2026-107768

    T−30d 15 oct. 2026

  10. 7,2 Alta

    CVE-2026-110701: cross-site scripting (XSS) en CP Multi View Events Calendar

    CVE-2026-110701

    T−30d 15 oct. 2026

  11. 7,2 Alta

    CVE-2026-109193: cross-site scripting (XSS) en HivePress – Business Directory, Listings & Classified Ads Plugin

    CVE-2026-109193

    T−30d 15 oct. 2026

  12. 6,4 Media

    CVE-2026-109388: cross-site scripting (XSS) en HivePress – Business Directory, Listings & Classified Ads Plugin

    CVE-2026-109388

    T−30d 15 oct. 2026

  13. 6,4 Media

    CVE-2026-110290: cross-site scripting (XSS) en WebberZone Top 10 — Popular Posts

    CVE-2026-110290

    T−30d 15 oct. 2026

  14. 8,8 Alta

    CVE-2026-92553: subida de ficheros peligrosos en YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports

    CVE-2026-92553

    T−30d 15 oct. 2026

  15. 6,8 Media

    CVE-2026-107770: falta de autorización en Photo Engine (Media Organizer & Lightroom)

    CVE-2026-107770

    T−30d 15 oct. 2026

  16. 5,4 Media

    CVE-2026-110252: cross-site scripting (XSS) en WPeMatico RSS Feed Fetcher

    CVE-2026-110252

    T−30d 15 oct. 2026

  17. 6,5 Media

    CVE-2026-109382: autorización incorrecta en WSP MCP – Free MCP Plugin for WordPress: Connect Claude, ChatGPT & AI Agents

    CVE-2026-109382

    T−30d 15 oct. 2026

  18. 6,4 Media

    CVE-2026-108175: cross-site scripting (XSS) en MDTF – Meta Data and Taxonomies Filter

    CVE-2026-108175

    T−30d 15 oct. 2026

  19. 4,3 Media

    CVE-2026-110381: acceso a datos de otros usuarios (IDOR) en Simply Schedule Appointments

    CVE-2026-110381

    T−30d 15 oct. 2026

  20. 4,3 Media

    CVE-2026-110891: falta de autorización en WordLift – AI powered SEO – Schema

    CVE-2026-110891

    T−30d 15 oct. 2026

  21. 4,3 Media

    CVE-2026-110888: falta de autorización en AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini

    CVE-2026-110888

    T−30d 15 oct. 2026

  22. 6,4 Media

    CVE-2026-110890: cross-site scripting (XSS) en JetSmartFilters

    CVE-2026-110890

    T−30d 15 oct. 2026

  23. 6,4 Media

    CVE-2026-110664: cross-site scripting (XSS) en Premium Packages – Sell Digital Products Securely

    CVE-2026-110664

    T−30d 15 oct. 2026

  24. 5,3 Media

    CVE-2026-110367: falta de autorización en WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce

    CVE-2026-110367

    T−30d 15 oct. 2026

  25. 7,2 Alta

    CVE-2026-97640: cross-site scripting (XSS) en WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice)

    CVE-2026-97640

    T−30d 15 oct. 2026

  26. 4,3 Media

    CVE-2026-110371: falta de autorización en Strong Testimonials

    CVE-2026-110371

    T−30d 15 oct. 2026

  27. 2,7 Baja

    CVE-2026-109401: exposición de información sensible en WP Mail Logging

    CVE-2026-109401

    T−30d 15 oct. 2026

  28. 8,8 Alta

    CVE-2026-92115: inyección de comandos en WP Photo Album Plus

    CVE-2026-92115

    T−30d 15 oct. 2026

  29. 4,3 Media

    CVE-2026-19798: falta de autorización en WP Map Block – Google Maps, OpenStreetMap, Mapbox, Store & Shop Locator, Directory, Listings & Filters

    CVE-2026-19798

    T−30d 15 oct. 2026

  30. 5,3 Media

    CVE-2026-107646: exposición de información sensible en HUSKY – Products Filter for WooCommerce Professional. MCP is onboard

    CVE-2026-107646

    T−30d 15 oct. 2026