Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 6,4 Media

    CVE-2026-97340: cross-site scripting (XSS) en Avada | Website Builder For WordPress & WooCommerce

    CVE-2026-97340

    T−36d 9 oct. 2026

  2. 7,2 Alta

    CVE-2026-100178: cross-site scripting (XSS) en WPAdverts – Classifieds Plugin

    CVE-2026-100178

    T−36d 9 oct. 2026

  3. 7,5 Alta

    CVE-2026-96662: inyección SQL en Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress

    CVE-2026-96662

    T−36d 9 oct. 2026

  4. 6,4 Media

    CVE-2026-97396: cross-site scripting (XSS) en Email Marketing for WordPress and WooCommerce – Retainful

    CVE-2026-97396

    T−36d 9 oct. 2026

  5. 6,4 Media

    CVE-2026-102774: cross-site scripting (XSS) en SureDash – Community, Courses & Member Dashboard

    CVE-2026-102774

    T−36d 9 oct. 2026

  6. 7,2 Alta

    CVE-2026-96765: cross-site scripting (XSS) en WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)

    CVE-2026-96765

    T−36d 9 oct. 2026

  7. 6,4 Media

    CVE-2026-96563: cross-site scripting (XSS) en Motors – Car Dealership & Classified Listings Plugin

    CVE-2026-96563

    T−36d 9 oct. 2026

  8. 7,5 Alta

    CVE-2026-93746: acceso a datos de otros usuarios (IDOR) en WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels

    CVE-2026-93746

    T−36d 9 oct. 2026

  9. 8,1 Alta

    CVE-2026-104759: autenticación incorrecta en WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)

    CVE-2026-104759

    T−36d 9 oct. 2026

  10. 4,7 Media

    CVE-2026-101921: cross-site scripting (XSS) en WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More

    CVE-2026-101921

    T−36d 9 oct. 2026

  11. 6,5 Media

    CVE-2026-96653: inyección SQL en WP Directory Kit

    CVE-2026-96653

    T−36d 9 oct. 2026

  12. 6,4 Media

    CVE-2026-103478: cross-site scripting (XSS) en Premium Packages – Sell Digital Products Securely

    CVE-2026-103478

    T−36d 9 oct. 2026

  13. 9,8 Crít.

    CVE-2026-104803: autenticación incorrecta en WPCOM Member

    CVE-2026-104803

    T−36d 9 oct. 2026

  14. 5,4 Media

    CVE-2026-102291: inyección en Kirki – Freeform Page Builder, Website Builder & Customizer

    CVE-2026-102291

    T−36d 9 oct. 2026

  15. 7,2 Alta

    CVE-2026-96278: cross-site scripting (XSS) en WP Photo Album Plus

    CVE-2026-96278

    T−36d 9 oct. 2026

  16. 6,4 Media

    CVE-2026-96574: cross-site scripting (XSS) en User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

    CVE-2026-96574

    T−36d 9 oct. 2026

  17. 7,2 Alta

    CVE-2026-96572: cross-site scripting (XSS) en WP Meteor Website Speed Optimization Addon

    CVE-2026-96572

    T−36d 9 oct. 2026

  18. 6,4 Media

    CVE-2026-107822: vulnerabilidad en MariaDB

    CVE-2026-107822

    T−36d 9 oct. 2026

  19. 7,2 Alta

    CVE-2026-107823: escape incorrecto de la salida en MariaDB

    CVE-2026-107823

    T−36d 9 oct. 2026

  20. 6,4 Media

    CVE-2026-107816: lectura fuera de límites en MariaDB

    CVE-2026-107816

    T−36d 9 oct. 2026

  21. 4,4 Media

    CVE-2026-107817: lectura fuera de límites en MariaDB

    CVE-2026-107817

    T−36d 9 oct. 2026

  22. 8,4 Alta

    CVE-2026-107818: vulnerabilidad en MariaDB

    CVE-2026-107818

    T−36d 9 oct. 2026

  23. 8,0 Alta

    CVE-2026-107821: vulnerabilidad en MariaDB

    CVE-2026-107821

    T−36d 9 oct. 2026

  24. 5,4 Media

    CVE-2026-15178: falta de autorización en Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

    CVE-2026-15178

    T−36d 9 oct. 2026

  25. 7,2 Alta

    CVE-2026-12626: deserialización de datos no fiables en Online Scheduling and Appointment Booking System – Bookly

    CVE-2026-12626

    T−36d 9 oct. 2026

  26. 9,1 Crít.

    CVE-2026-104801: recorrido de rutas (path traversal) en PPOM – Product Addons & Custom Fields for WooCommerce

    CVE-2026-104801

    T−36d 9 oct. 2026

  27. 6,4 Media

    CVE-2026-6243: cross-site scripting (XSS) en ACF Frontend Admin by DynamiApps

    CVE-2026-6243

    T−36d 9 oct. 2026

  28. 8,1 Alta

    CVE-2026-94538: falta de autorización en WP File Download

    CVE-2026-94538

    T−36d 9 oct. 2026

  29. 6,1 Media

    CVE-2026-5725: cross-site scripting (XSS) en Favicon Rotator

    CVE-2026-5725

    T−36d 9 oct. 2026

  30. 5,3 Media

    CVE-2026-3717: falta de autorización en WP CV Builder

    CVE-2026-3717

    T−36d 9 oct. 2026