Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 8,0 Alta

    CVE-2026-93953: inyección SQL en Backuply – Backup, Restore, Migrate and Clone

    CVE-2026-93953

    T−30d 15 oct. 2026

  2. 6,4 Media

    CVE-2026-93535: cross-site scripting (XSS) en Dark Mode – Improve Accessibility with AI Powered Dark Theme

    CVE-2026-93535

    T−30d 15 oct. 2026

  3. 4,8 Media

    CVE-2026-100159: inyección de código en Popup Box – Create Countdown, Coupon, Video, Contact Form Popups

    CVE-2026-100159

    T−30d 15 oct. 2026

  4. 5,3 Media

    CVE-2026-110889: exposición de información sensible en Gantry 5 Framework

    CVE-2026-110889

    T−30d 15 oct. 2026

  5. 6,1 Media

    CVE-2026-110384: cross-site scripting (XSS) en Fancy Comments WordPress

    CVE-2026-110384

    T−30d 15 oct. 2026

  6. 5,3 Media

    CVE-2026-97314: exposición de información sensible en ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin

    CVE-2026-97314

    T−31d 15 oct. 2026

  7. 5,3 Media

    CVE-2026-103376: exposición de información sensible en PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI)

    CVE-2026-103376

    T−31d 15 oct. 2026

  8. 5,3 Media

    CVE-2026-109930: exposición de información sensible en MAIO – ChatGPT SEO Tracking & AI Search Optimization

    CVE-2026-109930

    T−31d 15 oct. 2026

  9. 5,3 Media

    CVE-2026-87844: falta de autorización en PickPlugins Product Designer for WooCommerce

    CVE-2026-87844

    T−31d 15 oct. 2026

  10. 6,6 Media

    CVE-2026-81344: deserialización de datos no fiables en ACF Frontend Admin by DynamiApps

    CVE-2026-81344

    T−31d 15 oct. 2026

  11. 6,4 Media

    CVE-2026-77829: cross-site scripting (XSS) en Cooked – Recipe Management

    CVE-2026-77829

    T−31d 15 oct. 2026

  12. 4,3 Media

    CVE-2026-110029: falta de autorización en Squeeze – Browser-Based Image Compression & WebP Converter (No API, No Limits)

    CVE-2026-110029

    T−31d 15 oct. 2026

  13. 6,4 Media

    CVE-2026-106470: falsificación de peticiones del servidor (SSRF) en WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps

    CVE-2026-106470

    T−31d 15 oct. 2026

  14. 5,3 Media

    CVE-2026-103350: vulnerabilidad en Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment

    CVE-2026-103350

    T−31d 15 oct. 2026

  15. 5,3 Media

    CVE-2026-81343: falta de autorización en ACF Frontend Admin by DynamiApps

    CVE-2026-81343

    T−31d 15 oct. 2026

  16. 5,3 Media

    CVE-2026-110527: vulnerabilidad en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

    CVE-2026-110527

    T−31d 15 oct. 2026

  17. 4,3 Media

    CVE-2026-108092: acceso a datos de otros usuarios (IDOR) en Blog2Social: Social Media Auto Post & Scheduler

    CVE-2026-108092

    T−31d 14 oct. 2026

  18. 4,3 Media

    CVE-2026-11905: falta de autorización en Elementor Website Builder – more than just a page builder

    CVE-2026-11905

    T−31d 14 oct. 2026

  19. 7,2 Alta

    CVE-2026-88043: cross-site scripting (XSS) en Mang Board

    CVE-2026-88043

    T−31d 14 oct. 2026

  20. 6,5 Media

    CVE-2026-86803: inyección de código en Ocean Extra

    CVE-2026-86803

    T−31d 14 oct. 2026

  21. 6,4 Media

    CVE-2026-78087: cross-site scripting (XSS) en VK Blocks

    CVE-2026-78087

    T−31d 14 oct. 2026

  22. 6,4 Media

    CVE-2026-78001: cross-site scripting (XSS) en Post and Page Builder by BoldGrid – Visual Drag and Drop Editor

    CVE-2026-78001

    T−31d 14 oct. 2026

  23. 7,2 Alta

    CVE-2026-18586: cross-site scripting (XSS) en Premium Packages – Sell Digital Products Securely

    CVE-2026-18586

    T−31d 14 oct. 2026

  24. 7,2 Alta

    CVE-2026-18548: cross-site scripting (XSS) en Groundhogg — CRM, Newsletters, and Marketing Automation

    CVE-2026-18548

    T−31d 14 oct. 2026

  25. 6,1 Media

    CVE-2026-18557: cross-site scripting (XSS) en Photo Gallery by 10Web – Mobile-Friendly Image Gallery

    CVE-2026-18557

    T−31d 14 oct. 2026

  26. 6,4 Media

    CVE-2026-17001: cross-site scripting (XSS) en Import and export users and customers

    CVE-2026-17001

    T−31d 14 oct. 2026

  27. 8,1 Alta

    CVE-2026-17031: falta de autorización en Checkout Field Manager (Checkout Manager) for WooCommerce

    CVE-2026-17031

    T−31d 14 oct. 2026

  28. 6,1 Media

    CVE-2026-15180: cross-site scripting (XSS) en Tracking Code Manager

    CVE-2026-15180

    T−31d 14 oct. 2026

  29. 7,5 Alta

    CVE-2026-15090: inyección SQL en Link Library

    CVE-2026-15090

    T−31d 14 oct. 2026

  30. 6,4 Media

    CVE-2026-14572: cross-site scripting (XSS) en Kirki – Freeform Page Builder, Website Builder & Customizer

    CVE-2026-14572

    T−31d 14 oct. 2026