Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 3,1 Baja

    CVE-2026-104742: falta de autorización en AI Puffer – MCP Server for Claude & ChatGPT, with AI Chatbot

    CVE-2026-104742

    T−36d 9 oct. 2026

  2. 3,1 Baja

    CVE-2026-104741: falta de autorización en AI Puffer – MCP Server for Claude & ChatGPT, with AI Chatbot

    CVE-2026-104741

    T−36d 9 oct. 2026

  3. 6,4 Media

    CVE-2026-97643: cross-site scripting (XSS) en GiveWP – Donation Plugin and Fundraising Platform

    CVE-2026-97643

    T−36d 9 oct. 2026

  4. 8,1 Alta

    CVE-2026-104899: inclusión de ficheros en PHP en GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

    CVE-2026-104899

    T−36d 9 oct. 2026

  5. 8,8 Alta

    CVE-2026-83526: subida de ficheros peligrosos en FV Player 8

    CVE-2026-83526

    T−36d 9 oct. 2026

  6. 8,8 Alta

    CVE-2026-77183: gestión incorrecta de privilegios en FooSales – Point of Sale (POS) for WooCommerce

    CVE-2026-77183

    T−36d 9 oct. 2026

  7. 6,4 Media

    CVE-2026-94421: cross-site scripting (XSS) en Church Admin

    CVE-2026-94421

    T−36d 9 oct. 2026

  8. 6,4 Media

    CVE-2026-91862: cross-site scripting (XSS) en Getwid – Gutenberg Blocks

    CVE-2026-91862

    T−36d 9 oct. 2026

  9. 6,4 Media

    CVE-2026-78068: cross-site scripting (XSS) en Table Field Add-on for ACF and SCF

    CVE-2026-78068

    T−36d 9 oct. 2026

  10. 6,4 Media

    CVE-2026-18558: cross-site scripting (XSS) en Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files

    CVE-2026-18558

    T−36d 9 oct. 2026

  11. 5,3 Media

    CVE-2026-18496: exposición de información sensible en Booking Calendar

    CVE-2026-18496

    T−36d 9 oct. 2026

  12. 6,4 Media

    CVE-2026-17025: cross-site scripting (XSS) en Graphene

    CVE-2026-17025

    T−36d 9 oct. 2026

  13. 7,2 Alta

    CVE-2026-96667: cross-site scripting (XSS) en Real Estate Manager – Property Listing and Agent Management

    CVE-2026-96667

    T−36d 9 oct. 2026

  14. 6,4 Media

    CVE-2026-14882: cross-site scripting (XSS) en Brizy – Page Builder

    CVE-2026-14882

    T−36d 9 oct. 2026

  15. 6,4 Media

    CVE-2026-14877: cross-site scripting (XSS) en Data Tables Generator by Supsystic – Excel-like, WooCommerce & Pricing Tables

    CVE-2026-14877

    T−36d 9 oct. 2026

  16. 6,4 Media

    CVE-2026-14379: cross-site scripting (XSS) en GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI

    CVE-2026-14379

    T−36d 9 oct. 2026

  17. 7,2 Alta

    CVE-2026-14335: cross-site scripting (XSS) en Easy Digital Downloads – eCommerce Payments and Subscriptions made easy

    CVE-2026-14335

    T−36d 9 oct. 2026

  18. 6,1 Media

    CVE-2026-12054: cross-site scripting (XSS) en Download Manager

    CVE-2026-12054

    T−36d 9 oct. 2026

  19. 8,4 Alta

    CVE-2026-107814: permisos incorrectos en un recurso crítico en MariaDB

    CVE-2026-107814

    T−36d 9 oct. 2026

  20. 6,4 Media

    CVE-2026-9696: cross-site scripting (XSS) en Download Manager

    CVE-2026-9696

    T−36d 9 oct. 2026

  21. 5,3 Media

    CVE-2026-6723: autorización incorrecta en Simply Schedule Appointments

    CVE-2026-6723

    T−36d 9 oct. 2026

  22. 6,4 Media

    CVE-2026-104993: cross-site scripting (XSS) en GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

    CVE-2026-104993

    T−36d 9 oct. 2026

  23. 9,1 Crít.

    CVE-2026-97670: inyección de código en Avada (Fusion) Builder

    CVE-2026-97670

    T−36d 9 oct. 2026

  24. 5,4 Media

    CVE-2026-5727: falta de autorización en Hello Plus

    CVE-2026-5727

    T−36d 9 oct. 2026

  25. 6,4 Media

    CVE-2026-97630: cross-site scripting (XSS) en FV Flowplayer Video Player

    CVE-2026-97630

    T−36d 9 oct. 2026

  26. 6,1 Media

    CVE-2026-103998: cross-site scripting (XSS) en Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

    CVE-2026-103998

    T−36d 9 oct. 2026

  27. 4,7 Media

    CVE-2026-101324: cross-site scripting (XSS) en Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

    CVE-2026-101324

    T−36d 9 oct. 2026

  28. 5,3 Media

    CVE-2026-104724: inyección SQL en FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment

    CVE-2026-104724

    T−36d 9 oct. 2026

  29. 6,1 Media

    CVE-2026-87869: cross-site scripting (XSS) en Filter Everything — WordPress & WooCommerce Filters

    CVE-2026-87869

    T−36d 9 oct. 2026

  30. 6,4 Media

    CVE-2026-104735: cross-site scripting (XSS) en RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator

    CVE-2026-104735

    T−36d 9 oct. 2026