Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 7,2 Alta

    CVE-2026-32575: cross-site scripting (XSS) en SUMO Affiliates Pro

    CVE-2026-32575

    T−41d 4 oct. 2026

  2. 4,3 Media

    CVE-2026-32576: acceso a datos de otros usuarios (IDOR) en Faktur Pro for WooCommerce

    CVE-2026-32576

    T−41d 4 oct. 2026

  3. 4,3 Media

    CVE-2026-32578: falta de autorización en ECPay Ecommerce for WooCommerce

    CVE-2026-32578

    T−41d 4 oct. 2026

  4. 9,8 Crít.

    CVE-2026-32579: subida de ficheros peligrosos en Kognetiks Chatbot

    CVE-2026-32579

    T−41d 4 oct. 2026

  5. 7,2 Alta

    CVE-2026-39719: falsificación de peticiones del servidor (SSRF) en PDF Smart Viewer for Elementor

    CVE-2026-39719

    T−41d 4 oct. 2026

  6. 4,3 Media

    CVE-2026-62072: falta de autorización en Progress Planner

    CVE-2026-62072

    T−42d 4 oct. 2026

  7. 5,3 Media

    CVE-2026-95526: falta de autorización en BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server)

    CVE-2026-95526

    T−42d 4 oct. 2026

  8. 6,1 Media

    CVE-2026-103346: cross-site scripting (XSS) en Payflex Payment Gateway

    CVE-2026-103346

    T−42d 4 oct. 2026

  9. 9,8 Crít.

    CVE-2026-94503: subida de ficheros peligrosos en Zombify

    CVE-2026-94503

    T−42d 4 oct. 2026

  10. 7,5 Alta

    CVE-2026-32557: inyección SQL en WooCommerce Appointments

    CVE-2026-32557

    T−42d 4 oct. 2026

  11. 6,1 Media

    CVE-2026-94161: cross-site scripting (XSS) en Grand Restaurant WordPress

    CVE-2026-94161

    T−42d 4 oct. 2026

  12. 7,2 Alta

    CVE-2026-94170: cross-site scripting (XSS) en Social Sharing Plugin – Sassy Social Share

    CVE-2026-94170

    T−42d 4 oct. 2026

  13. 7,5 Alta

    CVE-2026-32580: inyección SQL en WooCommerce Lottery

    CVE-2026-32580

    T−42d 4 oct. 2026

  14. 7,5 Alta

    CVE-2026-94664: recorrido de rutas (path traversal) en PDF for Contact Form 7 + Drag and Drop Template Builder

    CVE-2026-94664

    T−42d 4 oct. 2026

  15. 7,5 Alta

    CVE-2026-94666: recorrido de rutas (path traversal) en Generate PDF using Contact Form 7

    CVE-2026-94666

    T−42d 4 oct. 2026

  16. 7,2 Alta

    CVE-2026-96332: cross-site scripting (XSS) en Simple Payment

    CVE-2026-96332

    T−42d 4 oct. 2026

  17. 7,2 Alta

    CVE-2026-94159: cross-site scripting (XSS) en Total Donations

    CVE-2026-94159

    T−42d 4 oct. 2026

  18. 7,2 Alta

    CVE-2026-32572: cross-site scripting (XSS) en WP User Frontend Pro

    CVE-2026-32572

    T−42d 4 oct. 2026

  19. 7,2 Alta

    CVE-2026-32569: cross-site scripting (XSS) en WP Media folder

    CVE-2026-32569

    T−42d 4 oct. 2026

  20. 7,2 Alta

    CVE-2026-94167: cross-site scripting (XSS) en Kubio AI Page Builder

    CVE-2026-94167

    T−42d 4 oct. 2026

  21. 8,1 Alta

    CVE-2026-104747: deserialización de datos no fiables en Haaken - Fashion Store WordPress Theme

    CVE-2026-104747

    T−42d 4 oct. 2026

  22. 6,4 Media

    CVE-2026-96607: cross-site scripting (XSS) en NEX-Forms – Ultimate Forms Plugin for WordPress

    CVE-2026-96607

    T−42d 4 oct. 2026

  23. 5,3 Media

    CVE-2026-96334: falta de autorización en User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

    CVE-2026-96334

    T−42d 4 oct. 2026

  24. 6,4 Media

    CVE-2026-94667: cross-site scripting (XSS) en JetReviews

    CVE-2026-94667

    T−42d 4 oct. 2026

  25. 6,4 Media

    CVE-2026-94665: cross-site scripting (XSS) en Classified Listing – AI-Powered Classified ads & Business Directory

    CVE-2026-94665

    T−42d 4 oct. 2026

  26. 5,3 Media

    CVE-2026-48199: falta de autorización en Sermon'e

    CVE-2026-48199

    T−42d 4 oct. 2026

  27. 6,5 Media

    CVE-2026-94663: inyección SQL en ProfileGrid – User Profiles, Groups and Communities

    CVE-2026-94663

    T−42d 4 oct. 2026

  28. 6,1 Media

    CVE-2026-32570: cross-site scripting (XSS) en Progressify – All-in-One Progressive Web App (PWA)

    CVE-2026-32570

    T−42d 4 oct. 2026

  29. 4,3 Media

    CVE-2026-95589: falta de autorización en Advanced Partial Payment or Deposit for WooCommerce

    CVE-2026-95589

    T−42d 4 oct. 2026

  30. 7,2 Alta

    CVE-2026-94668: cross-site scripting (XSS) en Salon Booking System – Appointment Booking for Salons, Barbershops & Spas

    CVE-2026-94668

    T−42d 4 oct. 2026