Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 5,3 Media

    CVE-2026-121722: falta de autorización en Formidable Forms Signature Online Contract Automation

    CVE-2026-121722

    T−7d 7 nov. 2026

  2. 5,3 Media

    CVE-2026-119515: falta de autorización en Radius Booking – Appointment Booking Calendar & Scheduling for Services & Events

    CVE-2026-119515

    T−7d 7 nov. 2026

  3. 4,3 Media

    CVE-2026-123470: falta de autorización en HivePress – Business Directory, Listings & Classified Ads Plugin

    CVE-2026-123470

    T−7d 7 nov. 2026

  4. 6,4 Media

    CVE-2026-122665: cross-site scripting (XSS) en Mang Board

    CVE-2026-122665

    T−7d 7 nov. 2026

  5. 6,1 Media

    CVE-2026-122666: cross-site scripting (XSS) en Mang Board

    CVE-2026-122666

    T−7d 7 nov. 2026

  6. 5,3 Media

    CVE-2026-119513: falta de autorización en JS Help Desk – AI-Powered Support & Ticketing System

    CVE-2026-119513

    T−7d 7 nov. 2026

  7. 6,4 Media

    CVE-2026-119524: cross-site scripting (XSS) en WP Customer Area

    CVE-2026-119524

    T−7d 7 nov. 2026

  8. 4,3 Media

    CVE-2026-123468: falta de autorización en Motors – Car Dealership & Classified Listings Plugin

    CVE-2026-123468

    T−7d 7 nov. 2026

  9. 7,2 Alta

    CVE-2026-123476: cross-site scripting (XSS) en Featured Image from URL (FIFU)

    CVE-2026-123476

    T−7d 7 nov. 2026

  10. 6,4 Media

    CVE-2026-120855: cross-site scripting (XSS) en TI WooCommerce Wishlist

    CVE-2026-120855

    T−7d 7 nov. 2026

  11. 7,2 Alta

    CVE-2026-121570: cross-site scripting (XSS) en RSVP and Event Management

    CVE-2026-121570

    T−7d 7 nov. 2026

  12. 5,3 Media

    CVE-2026-123475: falta de autorización en MapSVG – Vector maps, Google Maps, Image maps – with AI assistant

    CVE-2026-123475

    T−7d 7 nov. 2026

  13. 5,3 Media

    CVE-2026-120857: falta de autorización en 2Way VideoCalls and Random Chat – HTML5 Webcam Videochat

    CVE-2026-120857

    T−7d 7 nov. 2026

  14. 5,3 Media

    CVE-2026-123148: falta de autorización en The Innovative Form Builder – IvyForms

    CVE-2026-123148

    T−7d 7 nov. 2026

  15. 4,3 Media

    CVE-2026-120837: falta de autorización en Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI

    CVE-2026-120837

    T−7d 7 nov. 2026

  16. 4,3 Media

    CVE-2026-121724: falta de autorización en Contextual Related Posts

    CVE-2026-121724

    T−7d 7 nov. 2026

  17. 6,4 Media

    CVE-2026-120364: cross-site scripting (XSS) en Vidplex – Ultimate Video Gallery Block for YouTube in Gutenberg

    CVE-2026-120364

    T−7d 7 nov. 2026

  18. 5,3 Media

    CVE-2026-119523: falta de autorización en Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction

    CVE-2026-119523

    T−7d 7 nov. 2026

  19. 4,3 Media

    CVE-2026-119525: falta de autorización en Dropshipping XML Import for WooCommerce

    CVE-2026-119525

    T−7d 7 nov. 2026

  20. 6,4 Media

    CVE-2026-120365: cross-site scripting (XSS) en WP Customer Area

    CVE-2026-120365

    T−7d 7 nov. 2026

  21. 5,3 Media

    CVE-2026-119508: falta de autorización en Radius Booking – Appointment Booking Calendar & Scheduling for Services & Events

    CVE-2026-119508

    T−7d 7 nov. 2026

  22. 6,4 Media

    CVE-2026-119501: cross-site scripting (XSS) en Element Pack Addons for Elementor – MCP & AI-Ready Elementor Widgets, Elementor Templates, Elementor Addons

    CVE-2026-119501

    T−7d 7 nov. 2026

  23. 4,3 Media

    CVE-2026-121783: falsificación de peticiones (CSRF) en WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps

    CVE-2026-121783

    T−7d 7 nov. 2026

  24. 6,4 Media

    CVE-2026-119500: cross-site scripting (XSS) en HTML5 Video Player – embed fast, responsive videos with ease

    CVE-2026-119500

    T−7d 7 nov. 2026

  25. 4,3 Media

    CVE-2026-119486: falta de autorización en FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration

    CVE-2026-119486

    T−7d 7 nov. 2026

  26. 4,3 Media

    CVE-2026-120840: falta de autorización en User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

    CVE-2026-120840

    T−7d 7 nov. 2026

  27. 5,3 Media

    CVE-2026-120842: falta de autorización en SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz

    CVE-2026-120842

    T−7d 7 nov. 2026

  28. 6,4 Media

    CVE-2026-119520: cross-site scripting (XSS) en Spectra Legacy – Gutenberg Blocks

    CVE-2026-119520

    T−7d 7 nov. 2026

  29. 6,4 Media

    CVE-2026-119493: cross-site scripting (XSS) en Ditty – Responsive News Tickers, Sliders, and Lists

    CVE-2026-119493

    T−7d 7 nov. 2026

  30. 6,1 Media

    CVE-2026-121782: cross-site scripting (XSS) en If-So Dynamic Content – Elementor & All Page Builders Personalization

    CVE-2026-121782

    T−7d 7 nov. 2026