Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 4,3 Media

    CVE-2026-110191: exposición de información sensible en Product Delivery Date for WooCommerce – Lite

    CVE-2026-110191

    T−32d 14 oct. 2026

  2. 5,3 Media

    CVE-2026-96900: acceso a datos de otros usuarios (IDOR) en Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails

    CVE-2026-96900

    T−32d 14 oct. 2026

  3. 5,3 Media

    CVE-2026-82844: vulnerabilidad en WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More

    CVE-2026-82844

    T−32d 14 oct. 2026

  4. 5,3 Media

    CVE-2026-107320: falta de autorización en GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI

    CVE-2026-107320

    T−32d 14 oct. 2026

  5. 5,3 Media

    CVE-2026-92431: falta de autorización en Patreon WordPress

    CVE-2026-92431

    T−32d 14 oct. 2026

  6. 5,4 Media

    CVE-2026-8145: gestión incorrecta de privilegios en WholesaleX – Wholesale Pricing & B2B Solution

    CVE-2026-8145

    T−32d 14 oct. 2026

  7. 7,3 Alta

    CVE-2026-101301: falta de autorización en WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager

    CVE-2026-101301

    T−32d 14 oct. 2026

  8. 6,4 Media

    CVE-2026-106469: cross-site scripting (XSS) en Gutenverse Form – Contact Form Builder, Block Form & Booking Form

    CVE-2026-106469

    T−32d 14 oct. 2026

  9. 7,5 Alta

    CVE-2026-104246: recorrido de rutas (path traversal) en Contact Form 7 Signature Addon

    CVE-2026-104246

    T−32d 14 oct. 2026

  10. 9,8 Crít.

    CVE-2026-110135: autenticación incorrecta en OTP Login & Register Woocommerce

    CVE-2026-110135

    T−32d 14 oct. 2026

  11. 4,3 Media

    CVE-2026-92433: falsificación de peticiones (CSRF) en Patreon WordPress

    CVE-2026-92433

    T−32d 14 oct. 2026

  12. 9,8 Crít.

    CVE-2026-104748: gestión incorrecta de privilegios en SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications

    CVE-2026-104748

    T−32d 13 oct. 2026

  13. 7,2 Alta

    CVE-2026-107631: cross-site scripting (XSS) en Record of Consent Extension for Complianz

    CVE-2026-107631

    T−32d 13 oct. 2026

  14. 8,1 Alta

    CVE-2026-103367: inclusión de ficheros en PHP en ShopMagic – email automation for WordPress

    CVE-2026-103367

    T−32d 13 oct. 2026

  15. 6,4 Media

    CVE-2025-9373: cross-site scripting (XSS) en PeproDev Branches Map (Mapify)

    CVE-2025-9373

    T−32d 13 oct. 2026

  16. 7,2 Alta

    CVE-2026-104764: deserialización de datos no fiables en Post Export Import with Media

    CVE-2026-104764

    T−32d 13 oct. 2026

  17. 6,4 Media

    CVE-2026-107756: cross-site scripting (XSS) en Meow Lightbox

    CVE-2026-107756

    T−32d 13 oct. 2026

  18. 8,1 Alta

    CVE-2026-104909: inclusión de ficheros en PHP en Mang Board

    CVE-2026-104909

    T−32d 13 oct. 2026

  19. 7,2 Alta

    CVE-2026-107751: cross-site scripting (XSS) en Mang Board

    CVE-2026-107751

    T−32d 13 oct. 2026

  20. 6,4 Media

    CVE-2026-104761: cross-site scripting (XSS) en Mang Board

    CVE-2026-104761

    T−32d 13 oct. 2026

  21. 7,5 Alta

    CVE-2026-110284: inclusión de ficheros en PHP en LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes

    CVE-2026-110284

    T−32d 13 oct. 2026

  22. 6,5 Media

    CVE-2026-103907: falta de autorización en Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress

    CVE-2026-103907

    T−32d 13 oct. 2026

  23. 7,4 Alta

    CVE-2026-100163: autenticación incorrecta en Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress

    CVE-2026-100163

    T−32d 13 oct. 2026

  24. 7,5 Alta

    CVE-2026-103366: acceso a datos de otros usuarios (IDOR) en Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress

    CVE-2026-103366

    T−32d 13 oct. 2026

  25. 4,3 Media

    CVE-2026-103380: exposición de información sensible en Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress

    CVE-2026-103380

    T−32d 13 oct. 2026

  26. 6,4 Media

    CVE-2026-107650: cross-site scripting (XSS) en GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

    CVE-2026-107650

    T−32d 13 oct. 2026

  27. 6,4 Media

    CVE-2026-107754: cross-site scripting (XSS) en GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

    CVE-2026-107754

    T−32d 13 oct. 2026

  28. 4,9 Media

    CVE-2026-107757: cross-site scripting (XSS) en Gallery Custom Links

    CVE-2026-107757

    T−32d 13 oct. 2026

  29. 6,4 Media

    CVE-2026-103369: cross-site scripting (XSS) en Social Share Buttons & Analytics Plugin – GetSocial.io

    CVE-2026-103369

    T−32d 13 oct. 2026

  30. 7,2 Alta

    CVE-2026-101924: cross-site scripting (XSS) en NewStatPress

    CVE-2026-101924

    T−32d 13 oct. 2026