Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 4,3 Media

    CVE-2026-109696: falta de autorización en FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration

    CVE-2026-109696

    T−33d 13 oct. 2026

  2. 5,3 Media

    CVE-2026-106598: exposición de información sensible en User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

    CVE-2026-106598

    T−33d 13 oct. 2026

  3. 5,3 Media

    CVE-2026-108174: falta de autorización en FOX – Currency Switcher Professional for WooCommerce

    CVE-2026-108174

    T−33d 13 oct. 2026

  4. 6,4 Media

    CVE-2026-108488: cross-site scripting (XSS) en PowerPack Addons for Elementor: Widgets, Form Styler and Templates

    CVE-2026-108488

    T−33d 13 oct. 2026

  5. 5,3 Media

    CVE-2026-74922: control de acceso inadecuado en Document Gallery

    CVE-2026-74922

    T−33d 13 oct. 2026

  6. 6,4 Media

    CVE-2026-109697: cross-site scripting (XSS) en SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments

    CVE-2026-109697

    T−33d 13 oct. 2026

  7. 6,1 Media

    CVE-2026-74920: cross-site scripting (XSS) en Document Gallery

    CVE-2026-74920

    T−33d 13 oct. 2026

  8. 5,3 Media

    CVE-2026-109684: falta de autorización en Booking for Appointments and Events Calendar – Amelia

    CVE-2026-109684

    T−33d 13 oct. 2026

  9. 6,1 Media

    CVE-2026-105065: cross-site scripting (XSS) en XStore

    CVE-2026-105065

    T−33d 13 oct. 2026

  10. 5,3 Media

    CVE-2026-103324: vulnerabilidad en Cardinity Payment Gateway for WooCommerce

    CVE-2026-103324

    T−33d 13 oct. 2026

  11. 4,9 Media

    CVE-2026-109687: inyección SQL en Link Whisper Free

    CVE-2026-109687

    T−33d 13 oct. 2026

  12. 7,5 Alta

    CVE-2026-91833: inyección SQL en WX Subscribe 微信支付付费订阅

    CVE-2026-91833

    T−33d 13 oct. 2026

  13. 6,4 Media

    CVE-2026-108490: cross-site scripting (XSS) en Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates

    CVE-2026-108490

    T−33d 13 oct. 2026

  14. 5,3 Media

    CVE-2026-74923: exposición de información sensible en Document Gallery

    CVE-2026-74923

    T−33d 13 oct. 2026

  15. 5,3 Media

    CVE-2026-103304: falta de autorización en eaSYNC Booking – Hotels, Restaurants & Car Rentals

    CVE-2026-103304

    T−33d 13 oct. 2026

  16. 6,4 Media

    CVE-2026-54867: cross-site scripting (XSS) en Responsive Slider

    CVE-2026-54867

    T−33d 13 oct. 2026

  17. 8,1 Alta

    CVE-2026-54857: deserialización de datos no fiables en Quirky - NFT, Token & Artist Marketplace WordPress Theme

    CVE-2026-54857

    T−33d 13 oct. 2026

  18. 7,3 Alta

    CVE-2026-92429: vulnerabilidad en Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit

    CVE-2026-92429

    T−33d 13 oct. 2026

  19. 7,3 Alta

    CVE-2026-92428: vulnerabilidad en Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit

    CVE-2026-92428

    T−33d 13 oct. 2026

  20. 6,4 Media

    CVE-2026-54869: cross-site scripting (XSS) en IMPress for IDX Broker

    CVE-2026-54869

    T−33d 13 oct. 2026

  21. 6,4 Media

    CVE-2026-89269: cross-site scripting (XSS) en WP Testimonials

    CVE-2026-89269

    T−33d 13 oct. 2026

  22. 6,4 Media

    CVE-2026-108495: cross-site scripting (XSS) en SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz

    CVE-2026-108495

    T−33d 13 oct. 2026

  23. 6,4 Media

    CVE-2026-74921: cross-site scripting (XSS) en Document Gallery

    CVE-2026-74921

    T−33d 13 oct. 2026

  24. 4,9 Media

    CVE-2026-108179: inyección SQL en WOLF – WordPress Posts Bulk Editor and Manager Professional

    CVE-2026-108179

    T−33d 13 oct. 2026

  25. 4,3 Media

    CVE-2026-105974: exposición de información sensible en Visual Form Builder

    CVE-2026-105974

    T−33d 13 oct. 2026

  26. 7,2 Alta

    CVE-2026-102007: cross-site scripting (XSS) en Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation

    CVE-2026-102007

    T−33d 12 oct. 2026

  27. 4,9 Media

    CVE-2026-15399: inyección SQL en Animated Number Counters

    CVE-2026-15399

    T−33d 12 oct. 2026

  28. 7,2 Alta

    CVE-2026-102562: cross-site scripting (XSS) en AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

    CVE-2026-102562

    T−33d 12 oct. 2026

  29. 4,3 Media

    CVE-2026-89097: exposición de información sensible en Ad Inserter – Ad Manager & AdSense Ads

    CVE-2026-89097

    T−33d 12 oct. 2026

  30. 4,3 Media

    CVE-2026-61994: falta de autorización en WP-Members Membership Plugin

    CVE-2026-61994

    T−33d 12 oct. 2026