Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 6,1 Media

    CVE-2026-109685: cross-site scripting (XSS) en Link Whisper Free

    CVE-2026-109685

    T−32d 13 oct. 2026

  2. 7,3 Alta

    CVE-2026-109892: gestión incorrecta de privilegios en ACF Frontend Admin by DynamiApps

    CVE-2026-109892

    T−32d 13 oct. 2026

  3. 6,6 Media

    CVE-2026-42701: deserialización de datos no fiables en YayMail – WooCommerce Email Customizer

    CVE-2026-42701

    T−32d 13 oct. 2026

  4. 6,4 Media

    CVE-2026-105882: cross-site scripting (XSS) en User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

    CVE-2026-105882

    T−32d 13 oct. 2026

  5. 7,5 Alta

    CVE-2026-109688: inyección SQL en Link Whisper Free

    CVE-2026-109688

    T−32d 13 oct. 2026

  6. 5,3 Media

    CVE-2026-107416: acceso a datos de otros usuarios (IDOR) en Easy Appointment Booking & Scheduling Plugin – Webba Booking Calendar

    CVE-2026-107416

    T−32d 13 oct. 2026

  7. 7,5 Alta

    CVE-2026-104767: gestión incorrecta de privilegios en Membership & User Roles for WooCommerce (Automatic Role Changer)

    CVE-2026-104767

    T−32d 13 oct. 2026

  8. 8,1 Alta

    CVE-2026-17092: falta de autorización en Directorist: AI-Powered Business Directory, Listings & Classified Ads

    CVE-2026-17092

    T−32d 13 oct. 2026

  9. 5,3 Media

    CVE-2026-107652: acceso a datos de otros usuarios (IDOR) en Database Addon for Contact Form 7 – CFDB7

    CVE-2026-107652

    T−32d 13 oct. 2026

  10. 6,4 Media

    CVE-2026-109702: cross-site scripting (XSS) en Social Share Buttons

    CVE-2026-109702

    T−32d 13 oct. 2026

  11. 9,1 Crít.

    CVE-2026-92097: inyección de código en Click to Chat – HoliThemes

    CVE-2026-92097

    T−32d 13 oct. 2026

  12. 8,1 Alta

    CVE-2026-104995: inclusión de ficheros en PHP en BP Profile Search

    CVE-2026-104995

    T−32d 13 oct. 2026

  13. 6,4 Media

    CVE-2026-103425: cross-site scripting (XSS) en Booking Package

    CVE-2026-103425

    T−32d 13 oct. 2026

  14. 7,5 Alta

    CVE-2026-103423: falta de autorización en Booking Package

    CVE-2026-103423

    T−32d 13 oct. 2026

  15. 7,5 Alta

    CVE-2026-104749: gestión incorrecta de privilegios en Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation

    CVE-2026-104749

    T−32d 13 oct. 2026

  16. 7,5 Alta

    CVE-2026-109698: inyección SQL en Mang Board

    CVE-2026-109698

    T−32d 13 oct. 2026

  17. 4,3 Media

    CVE-2026-109692: falta de autorización en User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

    CVE-2026-109692

    T−32d 13 oct. 2026

  18. 6,3 Media

    CVE-2026-109693: gestión incorrecta de privilegios en FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution

    CVE-2026-109693

    T−32d 13 oct. 2026

  19. 5,3 Media

    CVE-2026-109695: exposición de información sensible en FluentCart – Online Store Builder & eCommerce Checkout

    CVE-2026-109695

    T−32d 13 oct. 2026

  20. 7,3 Alta

    CVE-2026-109694: gestión incorrecta de privilegios en FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution

    CVE-2026-109694

    T−32d 13 oct. 2026

  21. 7,2 Alta

    CVE-2026-108491: cross-site scripting (XSS) en Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI

    CVE-2026-108491

    T−32d 13 oct. 2026

  22. 7,5 Alta

    CVE-2026-108497: inyección SQL en Booking for Appointments and Events Calendar – Amelia

    CVE-2026-108497

    T−32d 13 oct. 2026

  23. 7,2 Alta

    CVE-2026-108498: cross-site scripting (XSS) en BSK PDF Manager

    CVE-2026-108498

    T−32d 13 oct. 2026

  24. 7,2 Alta

    CVE-2026-42692: cross-site scripting (XSS) en WP Crowdfunding

    CVE-2026-42692

    T−32d 13 oct. 2026

  25. 7,2 Alta

    CVE-2026-108494: cross-site scripting (XSS) en Chained Quiz

    CVE-2026-108494

    T−32d 13 oct. 2026

  26. 7,2 Alta

    CVE-2026-54864: cross-site scripting (XSS) en Cincopa video and media plug-in

    CVE-2026-54864

    T−32d 13 oct. 2026

  27. 6,4 Media

    CVE-2026-54865: cross-site scripting (XSS) en Podamibe Custom User Gravatar

    CVE-2026-54865

    T−32d 13 oct. 2026

  28. 7,2 Alta

    CVE-2026-54866: cross-site scripting (XSS) en Razorpay Payment Button Elementor Plugin

    CVE-2026-54866

    T−32d 13 oct. 2026

  29. 8,1 Alta

    CVE-2026-61992: deserialización de datos no fiables en GEO my WP

    CVE-2026-61992

    T−32d 13 oct. 2026

  30. 7,2 Alta

    CVE-2026-61993: cross-site scripting (XSS) en Bitcoin Payments – Blockonomics

    CVE-2026-61993

    T−32d 13 oct. 2026