Saltar al contenido

Radar en marcha

Bastion/Radar

[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

  1. 7,5 Alta

    CVE-2026-96267: inyección SQL en WP Visitor Statistics (Real Time Traffic)

    CVE-2026-96267

    T−43d 2 oct. 2026

  2. 7,2 Alta

    CVE-2026-93889: cross-site scripting (XSS) en Mail logging & Catcher

    CVE-2026-93889

    T−43d 2 oct. 2026

  3. 7,5 Alta

    CVE-2026-75028: inclusión de ficheros en PHP en WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System

    CVE-2026-75028

    T−43d 2 oct. 2026

  4. 5,3 Media

    CVE-2026-11601: falta de autorización en WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System

    CVE-2026-11601

    T−43d 2 oct. 2026

  5. 9,1 Crít.

    CVE-2026-87115: recorrido de rutas (path traversal) en VikAppointments Services Booking Calendar

    CVE-2026-87115

    T−43d 2 oct. 2026

  6. 8,8 Alta

    CVE-2026-18443: inyección SQL en Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet)

    CVE-2026-18443

    T−43d 2 oct. 2026

  7. 6,4 Media

    CVE-2026-15795: cross-site scripting (XSS) en Responsive Starter Templates – Elementor Templates & Starter Sites

    CVE-2026-15795

    T−43d 2 oct. 2026

  8. 6,4 Media

    CVE-2026-97344: cross-site scripting (XSS) en Wp Social Login and Register Social Counter

    CVE-2026-97344

    T−43d 2 oct. 2026

  9. 4,9 Media

    CVE-2026-101357: cross-site scripting (XSS) en SEOPress – AI SEO Plugin & On-site SEO

    CVE-2026-101357

    T−43d 2 oct. 2026

  10. 7,2 Alta

    CVE-2026-96564: cross-site scripting (XSS) en SEOPress – AI SEO Plugin & On-site SEO

    CVE-2026-96564

    T−43d 2 oct. 2026

  11. 6,1 Media

    CVE-2026-103888: cross-site scripting (XSS) en WPC Smart Quick View for WooCommerce

    CVE-2026-103888

    T−43d 2 oct. 2026

  12. 8,1 Alta

    CVE-2026-101923: falta de autorización en Revopic – Photo Reviews for WooCommerce

    CVE-2026-101923

    T−43d 2 oct. 2026

  13. 6,4 Media

    CVE-2026-100148: cross-site scripting (XSS) en Rich Showcase for Google Reviews

    CVE-2026-100148

    T−43d 2 oct. 2026

  14. 7,2 Alta

    CVE-2026-97341: cross-site scripting (XSS) en Visitor Traffic Real Time Statistics

    CVE-2026-97341

    T−43d 2 oct. 2026

  15. 6,4 Media

    CVE-2025-12828: cross-site scripting (XSS) en Ultra Addons Lite for Elementor

    CVE-2025-12828

    T−43d 2 oct. 2026

  16. 7,2 Alta

    CVE-2026-87091: cross-site scripting (XSS) en Welcart e-Commerce

    CVE-2026-87091

    T−43d 2 oct. 2026

  17. 4,3 Media

    CVE-2026-11399: acceso a datos de otros usuarios (IDOR) en Helpdesk Support Ticket System for WooCommerce

    CVE-2026-11399

    T−43d 2 oct. 2026

  18. 7,2 Alta

    CVE-2026-96650: cross-site scripting (XSS) en Strong Testimonials

    CVE-2026-96650

    T−43d 2 oct. 2026

  19. 5,3 Media

    CVE-2026-100149: exposición de información sensible en WPZOOM Connect: Social Icons Widget & Block, Share Buttons & Click to Chat

    CVE-2026-100149

    T−43d 2 oct. 2026

  20. 7,5 Alta

    CVE-2026-97337: falta de autorización en Simple Membership

    CVE-2026-97337

    T−43d 2 oct. 2026

  21. 7,2 Alta

    CVE-2026-96575: cross-site scripting (XSS) en Transliterator – Multilingual and Multi-script Text Conversion

    CVE-2026-96575

    T−43d 2 oct. 2026

  22. 7,2 Alta

    CVE-2026-101928: cross-site scripting (XSS) en Magic Tooltips For Contact Form 7

    CVE-2026-101928

    T−43d 2 oct. 2026

  23. 7,5 Alta

    CVE-2026-103913: inyección SQL en GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

    CVE-2026-103913

    T−43d 2 oct. 2026

  24. 6,1 Media

    CVE-2026-103909: cross-site scripting (XSS) en Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More

    CVE-2026-103909

    T−43d 2 oct. 2026

  25. 4,3 Media

    CVE-2026-91108: falta de autorización en Alt Text AI – Automatically generate image alt text for SEO and accessibility

    CVE-2026-91108

    T−43d 2 oct. 2026

  26. 6,5 Media

    CVE-2026-100152: inyección de código en All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)

    CVE-2026-100152

    T−43d 2 oct. 2026

  27. 4,3 Media

    CVE-2026-120544: recorrido de rutas (path traversal) en Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning

    CVE-2026-120544

    T−43d 2 oct. 2026

  28. 7,2 Alta

    CVE-2026-92977: cross-site scripting (XSS) en Real Cookie Banner: GDPR & ePrivacy Cookie Consent

    CVE-2026-92977

    T−43d 2 oct. 2026

  29. 4,3 Media

    CVE-2026-39717: falta de autorización en LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

    CVE-2026-39717

    T−43d 2 oct. 2026

  30. 4,3 Media

    CVE-2026-104402: exposición de información sensible en Mindio Magic MCP

    CVE-2026-104402

    T−43d 2 oct. 2026