Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 6,5 Media

    CVE-2026-107712: inyección SQL en WP Booking System – Booking Calendar

    CVE-2026-107712

    T−36d 9 oct. 2026

  2. 6,1 Media

    CVE-2026-89100: cross-site scripting (XSS) en Payment Plugins for Stripe WooCommerce

    CVE-2026-89100

    T−36d 9 oct. 2026

  3. 7,2 Alta

    CVE-2026-100161: cross-site scripting (XSS) en Revopic – Photo Reviews for WooCommerce

    CVE-2026-100161

    T−36d 9 oct. 2026

  4. 7,2 Alta

    CVE-2026-95684: cross-site scripting (XSS) en VikBooking Hotel Booking Engine & PMS

    CVE-2026-95684

    T−36d 9 oct. 2026

  5. 7,2 Alta

    CVE-2026-107742: cross-site scripting (XSS) en 10Web Booster – Website speed optimization, Cache & Page Speed optimizer

    CVE-2026-107742

    T−36d 9 oct. 2026

  6. 6,4 Media

    CVE-2026-102402: cross-site scripting (XSS) en Team – Team Members Showcase Plugin

    CVE-2026-102402

    T−36d 9 oct. 2026

  7. 7,2 Alta

    CVE-2026-96840: cross-site scripting (XSS) en Post Grid Gutenberg Blocks – PostX

    CVE-2026-96840

    T−36d 9 oct. 2026

  8. 3,7 Baja

    CVE-2026-104006: vulnerabilidad en SpeedyCache – Cache, Optimization, Performance

    CVE-2026-104006

    T−36d 9 oct. 2026

  9. 6,5 Media

    CVE-2026-97348: recorrido de rutas (path traversal) en SiteOrigin Widgets Bundle

    CVE-2026-97348

    T−36d 9 oct. 2026

  10. 6,4 Media

    CVE-2026-103427: cross-site scripting (XSS) en Simple Membership

    CVE-2026-103427

    T−36d 9 oct. 2026

  11. 7,2 Alta

    CVE-2026-100196: cross-site scripting (XSS) en LazyLoad Plugin – Lazy Load Images, Videos, and Iframes

    CVE-2026-100196

    T−36d 9 oct. 2026

  12. 4,4 Media

    CVE-2026-103897: cross-site scripting (XSS) en Responsive Lightbox & Gallery

    CVE-2026-103897

    T−36d 9 oct. 2026

  13. 7,2 Alta

    CVE-2026-96558: cross-site scripting (XSS) en Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker

    CVE-2026-96558

    T−36d 9 oct. 2026

  14. 7,2 Alta

    CVE-2026-96682: cross-site scripting (XSS) en Presto Player

    CVE-2026-96682

    T−36d 9 oct. 2026

  15. 4,9 Media

    CVE-2026-104763: recorrido de rutas (path traversal) en Post Export Import with Media

    CVE-2026-104763

    T−36d 9 oct. 2026

  16. 4,9 Media

    CVE-2026-104023: inyección SQL en CES – Popup Builder, Optin Forms, Lead Generation, CRM & Email Marketing Automation

    CVE-2026-104023

    T−36d 9 oct. 2026

  17. 7,2 Alta

    CVE-2026-93775: cross-site scripting (XSS) en Podlove Podcast Publisher

    CVE-2026-93775

    T−36d 9 oct. 2026

  18. 5,3 Media

    CVE-2026-94375: vulnerabilidad en Order Export & Order Import for WooCommerce

    CVE-2026-94375

    T−36d 9 oct. 2026

  19. 5,4 Media

    CVE-2026-103482: cross-site scripting (XSS) en Noptin – Newsletter, New Post Notifications & Email Automation

    CVE-2026-103482

    T−36d 9 oct. 2026

  20. 7,5 Alta

    CVE-2026-115497: recorrido de rutas (path traversal) en Music Store – WordPress eCommerce

    CVE-2026-115497

    T−36d 9 oct. 2026

  21. 6,4 Media

    CVE-2026-16776: cross-site scripting (XSS) en MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar

    CVE-2026-16776

    T−36d 9 oct. 2026

  22. 8,8 Alta

    CVE-2026-104723: deserialización de datos no fiables en LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes

    CVE-2026-104723

    T−36d 9 oct. 2026

  23. 8,8 Alta

    CVE-2026-104766: gestión incorrecta de privilegios en Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress

    CVE-2026-104766

    T−36d 9 oct. 2026

  24. 4,3 Media

    CVE-2026-91050: acceso a datos de otros usuarios (IDOR) en Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress

    CVE-2026-91050

    T−36d 9 oct. 2026

  25. 8,5 Alta

    CVE-2026-107815: escritura fuera de límites en MariaDB

    CVE-2026-107815

    T−36d 9 oct. 2026

  26. 6,4 Media

    CVE-2026-104762: cross-site scripting (XSS) en Kadence Blocks — Page Builder Toolkit for Gutenberg Editor

    CVE-2026-104762

    T−36d 9 oct. 2026

  27. 4,7 Media

    CVE-2026-103912: cross-site scripting (XSS) en JetFormBuilder — Dynamic Blocks Form Builder

    CVE-2026-103912

    T−36d 9 oct. 2026

  28. 6,4 Media

    CVE-2026-103520: cross-site scripting (XSS) en HivePress – Business Directory, Listings & Classified Ads Plugin

    CVE-2026-103520

    T−36d 9 oct. 2026

  29. 8,1 Alta

    CVE-2026-92975: gestión incorrecta de privilegios en Groundhogg — CRM, Newsletters, and Marketing Automation

    CVE-2026-92975

    T−36d 9 oct. 2026

  30. 8,8 Alta

    CVE-2026-104725: gestión incorrecta de privilegios en Groundhogg — CRM, Newsletters, and Marketing Automation

    CVE-2026-104725

    T−36d 9 oct. 2026