[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

Tecnología Gravedad Sólo las que se están explotando

4,9 Media

CVE-2026-111178: inyección SQL en WP Booking System – Booking Calendar

CVE-2026-111178

T−30d 15 oct. 2026
4,8 Media

CVE-2026-104755: gestión incorrecta de privilegios en WP Compress – Instant Performance & Speed Optimization

CVE-2026-104755

T−30d 15 oct. 2026
5,4 Media

CVE-2026-15222: inyección de código en User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

CVE-2026-15222

T−30d 15 oct. 2026
6,5 Media

CVE-2026-109414: inyección SQL en Vitepos – Point of Sale (POS) for WooCommerce

CVE-2026-109414

T−30d 15 oct. 2026
7,2 Alta

CVE-2026-103999: cross-site scripting (XSS) en Ultra Addons for Contact Form 7

CVE-2026-103999

T−30d 15 oct. 2026
6,4 Media

CVE-2026-97470: cross-site scripting (XSS) en Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental

CVE-2026-97470

T−30d 15 oct. 2026
6,4 Media

CVE-2026-103480: cross-site scripting (XSS) en Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental

CVE-2026-103480

T−30d 15 oct. 2026
8,0 Alta

CVE-2026-104932: deserialización de datos no fiables en Search Regex

CVE-2026-104932

T−30d 15 oct. 2026
9,8 Crít.

CVE-2026-89079: gestión incorrecta de privilegios en Theme My Login

CVE-2026-89079

T−30d 15 oct. 2026
7,5 Alta

CVE-2026-103896: recorrido de rutas (path traversal) en 10Web Booster – Website speed optimization, Cache & Page Speed optimizer

CVE-2026-103896

T−30d 15 oct. 2026
6,5 Media

CVE-2026-93767: recorrido de rutas (path traversal) en Tainacan

CVE-2026-93767

T−30d 15 oct. 2026
9,8 Crít.

CVE-2026-103768: subida de ficheros peligrosos en ELEX WordPress HelpDesk & Customer Ticketing System

CVE-2026-103768

T−30d 15 oct. 2026
6,4 Media

CVE-2026-100158: cross-site scripting (XSS) en SQL Chart Builder

CVE-2026-100158

T−30d 15 oct. 2026
7,2 Alta

CVE-2026-89051: cross-site scripting (XSS) en Hide My WP Ghost – Security & Firewall

CVE-2026-89051

T−30d 15 oct. 2026
6,1 Media

CVE-2026-88963: cross-site scripting (XSS) en Tutor LMS – eLearning and online course solution

CVE-2026-88963

T−30d 15 oct. 2026
5,4 Media

CVE-2026-104001: inyección de código en Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated

CVE-2026-104001

T−30d 15 oct. 2026
7,2 Alta

CVE-2026-111122: cross-site scripting (XSS) en SiteOrigin CSS

CVE-2026-111122

T−30d 15 oct. 2026
7,2 Alta

CVE-2026-107764: cross-site scripting (XSS) en SiteOrigin CSS

CVE-2026-107764

T−30d 15 oct. 2026
5,3 Media

CVE-2026-12272: vulnerabilidad en Lightweight Cookie Notice – Cookie Banner for Cookie Consent

CVE-2026-12272

T−30d 15 oct. 2026
7,2 Alta

CVE-2026-96570: cross-site scripting (XSS) en Schema & Structured Data for WP & AMP

CVE-2026-96570

T−30d 15 oct. 2026
6,1 Media

CVE-2026-109701: cross-site scripting (XSS) en PAYCOMET for WooCommerce

CVE-2026-109701

T−30d 15 oct. 2026
7,2 Alta

CVE-2026-109232: cross-site scripting (XSS) en Salon Booking System – Appointment Booking for Salons, Barbershops & Spas

CVE-2026-109232

T−30d 15 oct. 2026
7,2 Alta

CVE-2026-104000: cross-site scripting (XSS) en Simply Schedule Appointments

CVE-2026-104000

T−30d 15 oct. 2026
6,4 Media

CVE-2026-110017: cross-site scripting (XSS) en Quick PayPal Payments: Payment Button & Form

CVE-2026-110017

T−30d 15 oct. 2026
6,4 Media

CVE-2026-107748: cross-site scripting (XSS) en User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

CVE-2026-107748

T−30d 15 oct. 2026
8,1 Alta

CVE-2026-109447: gestión incorrecta de privilegios en User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

CVE-2026-109447

T−30d 15 oct. 2026
7,2 Alta

CVE-2026-100186: cross-site scripting (XSS) en User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

CVE-2026-100186

T−30d 15 oct. 2026
8,8 Alta

CVE-2026-85659: gestión incorrecta de privilegios en PilotPress

CVE-2026-85659

T−30d 15 oct. 2026
7,2 Alta

CVE-2026-109513: cross-site scripting (XSS) en NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar

CVE-2026-109513

T−30d 15 oct. 2026
7,2 Alta

CVE-2026-95686: cross-site scripting (XSS) en Opti-Behavior – Self-Hosted Heatmaps, Funnels, A/B Testing & Smart Insights

CVE-2026-95686

T−30d 15 oct. 2026