Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 6,4 Media

    CVE-2026-120838: cross-site scripting (XSS) en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

    CVE-2026-120838

    T−7d 7 nov. 2026

  2. 7,2 Alta

    CVE-2026-119483: cross-site scripting (XSS) en Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

    CVE-2026-119483

    T−7d 7 nov. 2026

  3. 6,4 Media

    CVE-2026-119497: cross-site scripting (XSS) en Directorist: AI-Powered Business Directory, Listings & Classified Ads

    CVE-2026-119497

    T−7d 7 nov. 2026

  4. 7,2 Alta

    CVE-2026-119505: cross-site scripting (XSS) en Welcart e-Commerce

    CVE-2026-119505

    T−7d 7 nov. 2026

  5. 7,2 Alta

    CVE-2026-123463: cross-site scripting (XSS) en Checkout Files Upload for WooCommerce

    CVE-2026-123463

    T−7d 7 nov. 2026

  6. 6,4 Media

    CVE-2026-66675: cross-site scripting (XSS) en Motors – Car Dealership & Classified Listings Plugin

    CVE-2026-66675

    T−7d 7 nov. 2026

  7. 6,3 Media

    CVE-2026-119514: gestión incorrecta de privilegios en RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress

    CVE-2026-119514

    T−7d 7 nov. 2026

  8. 7,2 Alta

    CVE-2026-121764: cross-site scripting (XSS) en FV Flowplayer Video Player

    CVE-2026-121764

    T−7d 7 nov. 2026

  9. 7,2 Alta

    CVE-2026-119504: cross-site scripting (XSS) en ACF Frontend Admin by DynamiApps

    CVE-2026-119504

    T−7d 7 nov. 2026

  10. 5,3 Media

    CVE-2026-123465: exposición de información sensible en Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred

    CVE-2026-123465

    T−7d 7 nov. 2026

  11. 7,2 Alta

    CVE-2026-121780: cross-site scripting (XSS) en Flying Images: Optimize and Lazy Load Images for Faster Page Speed

    CVE-2026-121780

    T−7d 7 nov. 2026

  12. 6,1 Media

    CVE-2026-111403: cross-site scripting (XSS) en WP Inventory Manager

    CVE-2026-111403

    T−7d 7 nov. 2026

  13. 5,3 Media

    CVE-2026-121760: falta de autorización en weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot

    CVE-2026-121760

    T−7d 7 nov. 2026

  14. 5,3 Media

    CVE-2026-119465: exposición de información sensible en Addon Elements for Elementor (formerly Elementor Addon Elements)

    CVE-2026-119465

    T−7d 7 nov. 2026

  15. 6,4 Media

    CVE-2026-123464: cross-site scripting (XSS) en The Events Calendar

    CVE-2026-123464

    T−7d 7 nov. 2026

  16. 5,3 Media

    CVE-2026-119502: falta de autorización en Ultimate Store Kit – Store Builder Addons for Elementor, WooCommerce Store Builder, EDD Store Builder

    CVE-2026-119502

    T−7d 7 nov. 2026

  17. 4,3 Media

    CVE-2026-122668: falta de autorización en Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred

    CVE-2026-122668

    T−7d 7 nov. 2026

  18. 5,3 Media

    CVE-2026-120853: falta de autorización en CartFlows – Funnel Builder & Checkout Plugin for WooCommerce

    CVE-2026-120853

    T−7d 7 nov. 2026

  19. 4,3 Media

    CVE-2026-61990: falta de autorización en WCFM Membership – WooCommerce Memberships for Multivendor Marketplace

    CVE-2026-61990

    T−7d 7 nov. 2026

  20. 4,3 Media

    CVE-2026-119484: falsificación de peticiones (CSRF) en Photo Gallery by Supsystic – Image Gallery, Masonry, Albums & Lightbox

    CVE-2026-119484

    T−7d 7 nov. 2026

  21. 4,3 Media

    CVE-2026-119491: falta de autorización en Media Library Assistant

    CVE-2026-119491

    T−7d 7 nov. 2026

  22. 5,3 Media

    CVE-2026-119511: falta de autorización en MoreConvert Wishlist for WooCommerce

    CVE-2026-119511

    T−7d 7 nov. 2026

  23. 4,3 Media

    CVE-2026-120847: falta de autorización en MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor

    CVE-2026-120847

    T−7d 7 nov. 2026

  24. 5,3 Media

    CVE-2026-123466: falta de autorización en Premium Blocks – Gutenberg Blocks, Patterns & Templates

    CVE-2026-123466

    T−7d 7 nov. 2026

  25. 4,3 Media

    CVE-2026-119467: falta de autorización en Dynific Addons for Elementor (formerly Anywhere Elementor)

    CVE-2026-119467

    T−7d 7 nov. 2026

  26. 6,4 Media

    CVE-2026-119510: cross-site scripting (XSS) en MoreConvert Wishlist for WooCommerce

    CVE-2026-119510

    T−7d 7 nov. 2026

  27. 5,3 Media

    CVE-2026-121781: falta de autorización en Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution

    CVE-2026-121781

    T−7d 7 nov. 2026

  28. 6,4 Media

    CVE-2026-119489: cross-site scripting (XSS) en WP Recipe Maker

    CVE-2026-119489

    T−7d 7 nov. 2026

  29. 4,3 Media

    CVE-2026-120849: falta de autorización en WCFM Marketplace – Multivendor Marketplace for WooCommerce

    CVE-2026-120849

    T−7d 7 nov. 2026

  30. 6,4 Media

    CVE-2026-120848: cross-site scripting (XSS) en WCFM Marketplace – Multivendor Marketplace for WooCommerce

    CVE-2026-120848

    T−7d 7 nov. 2026