Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 5,3 Media

    CVE-2026-123088: acceso a datos de otros usuarios (IDOR) en UniPAY Payment Gateway For WooCommerce

    CVE-2026-123088

    T−5d 9 nov. 2026

  2. 6,4 Media

    CVE-2026-124257: cross-site scripting (XSS) en Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots

    CVE-2026-124257

    T−5d 9 nov. 2026

  3. 7,2 Alta

    CVE-2026-124253: cross-site scripting (XSS) en Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More

    CVE-2026-124253

    T−5d 9 nov. 2026

  4. 4,7 Media

    CVE-2026-121875: gestión incorrecta de privilegios en Post Duplicator

    CVE-2026-121875

    T−5d 9 nov. 2026

  5. 6,4 Media

    CVE-2026-124256: cross-site scripting (XSS) en Delivery & Pickup Date Time for WooCommerce

    CVE-2026-124256

    T−5d 9 nov. 2026

  6. 6,4 Media

    CVE-2026-123472: cross-site scripting (XSS) en Meta Box – A Framework for Dynamic Websites

    CVE-2026-123472

    T−6d 7 nov. 2026

  7. 5,3 Media

    CVE-2026-123461: falta de autorización en FOX – Currency Switcher Professional for WooCommerce

    CVE-2026-123461

    T−6d 7 nov. 2026

  8. 5,3 Media

    CVE-2026-124258: falta de autorización en User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

    CVE-2026-124258

    T−6d 7 nov. 2026

  9. 7,3 Alta

    CVE-2026-120834: gestión incorrecta de privilegios en WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden

    CVE-2026-120834

    T−6d 7 nov. 2026

  10. 6,4 Media

    CVE-2026-121573: cross-site scripting (XSS) en WP Activity Log

    CVE-2026-121573

    T−6d 7 nov. 2026

  11. 6,5 Media

    CVE-2026-121769: inyección SQL en WP w3all phpBB

    CVE-2026-121769

    T−6d 7 nov. 2026

  12. 6,3 Media

    CVE-2026-121576: gestión incorrecta de privilegios en MCP Server for WordPress – Connect Claude, ChatGPT & Gemini | AtlasMCP

    CVE-2026-121576

    T−6d 7 nov. 2026

  13. 7,2 Alta

    CVE-2026-123482: cross-site scripting (XSS) en JetFormBuilder — Dynamic Blocks Form Builder

    CVE-2026-123482

    T−6d 7 nov. 2026

  14. 7,5 Alta

    CVE-2026-120839: inclusión de ficheros en PHP en Travelly – Tour & Travel Booking Manager for WooCommerce

    CVE-2026-120839

    T−7d 7 nov. 2026

  15. 7,5 Alta

    CVE-2026-120841: inclusión de ficheros en PHP en Travelly – Tour & Travel Booking Manager for WooCommerce

    CVE-2026-120841

    T−7d 7 nov. 2026

  16. 4,3 Media

    CVE-2026-123467: falta de autorización en Motors – Car Dealership & Classified Listings Plugin

    CVE-2026-123467

    T−7d 7 nov. 2026

  17. 5,3 Media

    CVE-2026-121575: falta de autorización en WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

    CVE-2026-121575

    T−7d 7 nov. 2026

  18. 4,3 Media

    CVE-2026-122660: falta de autorización en FloristPress for Woo – Customize your eCommerce store for your Florist

    CVE-2026-122660

    T−7d 7 nov. 2026

  19. 6,4 Media

    CVE-2026-122673: cross-site scripting (XSS) en ShopEngine – All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets

    CVE-2026-122673

    T−7d 7 nov. 2026

  20. 5,3 Media

    CVE-2026-123474: falta de autorización en Premium Blocks – Gutenberg Blocks, Patterns & Templates

    CVE-2026-123474

    T−7d 7 nov. 2026

  21. 5,3 Media

    CVE-2026-121775: falta de autorización en CURCY – Multi Currency for WooCommerce

    CVE-2026-121775

    T−7d 7 nov. 2026

  22. 5,3 Media

    CVE-2026-123462: falta de autorización en Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred

    CVE-2026-123462

    T−7d 7 nov. 2026

  23. 6,4 Media

    CVE-2026-122669: cross-site scripting (XSS) en Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI

    CVE-2026-122669

    T−7d 7 nov. 2026

  24. 6,4 Media

    CVE-2026-121784: cross-site scripting (XSS) en Appointment Booking Plugin for WooCommerce | Online Booking Calendar & Service Manager

    CVE-2026-121784

    T−7d 7 nov. 2026

  25. 6,4 Media

    CVE-2026-123477: cross-site scripting (XSS) en JetEngine

    CVE-2026-123477

    T−7d 7 nov. 2026

  26. 7,2 Alta

    CVE-2026-121765: cross-site scripting (XSS) en TranslatePress – Translate Multilingual sites with AI Translation

    CVE-2026-121765

    T−7d 7 nov. 2026

  27. 7,5 Alta

    CVE-2026-120854: consumo de recursos sin control en iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more

    CVE-2026-120854

    T−7d 7 nov. 2026

  28. 7,2 Alta

    CVE-2026-123460: cross-site scripting (XSS) en Iptanus File Upload

    CVE-2026-123460

    T−7d 7 nov. 2026

  29. 6,4 Media

    CVE-2026-122661: cross-site scripting (XSS) en Directorist: AI-Powered Business Directory, Listings & Classified Ads

    CVE-2026-122661

    T−7d 7 nov. 2026

  30. 5,3 Media

    CVE-2026-121571: falta de autorización en Autopay dla WooCommerce

    CVE-2026-121571

    T−7d 7 nov. 2026