[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

Tecnología Gravedad Sólo las que se están explotando

9,8 Crít.

CVE-2026-94541: falta de autorización en WPMobile.App – Android and iOS App Builder

CVE-2026-94541

T−44d 1 oct. 2026
7,2 Alta

CVE-2026-87920: cross-site scripting (XSS) en W3 Total Cache

CVE-2026-87920

T−44d 1 oct. 2026
6,1 Media

CVE-2026-97652: cross-site scripting (XSS) en WP Statistics – Simple, privacy-friendly Google Analytics alternative

CVE-2026-97652

T−44d 1 oct. 2026
6,1 Media

CVE-2026-85492: cross-site scripting (XSS) en All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)

CVE-2026-85492

T−44d 1 oct. 2026
7,2 Alta

CVE-2026-103426: cross-site scripting (XSS) en Relevanssi Premium

CVE-2026-103426

T−44d 1 oct. 2026
7,2 Alta

CVE-2026-97641: cross-site scripting (XSS) en Relevanssi – A Better Search

CVE-2026-97641

T−44d 1 oct. 2026
3,1 Baja

CVE-2026-102002: exposición de información sensible en Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE

CVE-2026-102002

T−44d 1 oct. 2026
7,2 Alta

CVE-2026-96566: cross-site scripting (XSS) en Newsletter – Send awesome emails from WordPress

CVE-2026-96566

T−44d 1 oct. 2026
7,2 Alta

CVE-2026-96567: cross-site scripting (XSS) en MW WP Form

CVE-2026-96567

T−44d 1 oct. 2026
7,2 Alta

CVE-2026-95670: cross-site scripting (XSS) en No External Links

CVE-2026-95670

T−44d 1 oct. 2026
7,2 Alta

CVE-2026-96871: cross-site scripting (XSS) en Mang Board

CVE-2026-96871

T−44d 1 oct. 2026
6,4 Media

CVE-2026-96647: cross-site scripting (XSS) en Listdom: AI-powered Business Directory with Classifieds Ads Listings

CVE-2026-96647

T−44d 1 oct. 2026
5,3 Media

CVE-2026-94432: acceso a datos de otros usuarios (IDOR) en Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress

CVE-2026-94432

T−44d 1 oct. 2026
7,2 Alta

CVE-2026-100107: cross-site scripting (XSS) en Kubio AI Page Builder

CVE-2026-100107

T−44d 1 oct. 2026
9,8 Crít.

CVE-2026-97637: autenticación incorrecta en JSON API Auth

CVE-2026-97637

T−44d 1 oct. 2026
7,2 Alta

CVE-2026-97342: cross-site scripting (XSS) en JetFormBuilder — Dynamic Blocks Form Builder

CVE-2026-97342

T−44d 1 oct. 2026
7,2 Alta

CVE-2026-96578: cross-site scripting (XSS) en GSpeech TTS – WordPress Text To Speech Plugin

CVE-2026-96578

T−44d 1 oct. 2026
7,2 Alta

CVE-2026-93756: cross-site scripting (XSS) en Smash Balloon Social Post Feed – Simple Social Feeds for WordPress

CVE-2026-93756

T−44d 1 oct. 2026
6,1 Media

CVE-2026-93880: cross-site scripting (XSS) en Greenshift – animation and page builder blocks

CVE-2026-93880

T−44d 1 oct. 2026
6,5 Media

CVE-2026-97634: inyección SQL en Event Tickets and Registration

CVE-2026-97634

T−44d 1 oct. 2026
7,2 Alta

CVE-2026-100182: cross-site scripting (XSS) en Download Monitor

CVE-2026-100182

T−44d 1 oct. 2026
6,4 Media

CVE-2026-97338: cross-site scripting (XSS) en Download Manager

CVE-2026-97338

T−44d 1 oct. 2026
7,2 Alta

CVE-2026-95817: cross-site scripting (XSS) en DoFollow Case by Case

CVE-2026-95817

T−44d 1 oct. 2026
6,5 Media

CVE-2026-12951: inyección SQL en MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions

CVE-2026-12951

T−44d 1 oct. 2026
7,2 Alta

CVE-2026-97663: cross-site scripting (XSS) en Customer Reviews for WooCommerce

CVE-2026-97663

T−44d 1 oct. 2026
7,2 Alta

CVE-2026-102772: cross-site scripting (XSS) en CMB2

CVE-2026-102772

T−44d 1 oct. 2026
7,2 Alta

CVE-2026-97336: cross-site scripting (XSS) en CMB2

CVE-2026-97336

T−44d 1 oct. 2026
7,2 Alta

CVE-2026-102565: cross-site scripting (XSS) en BA Book Everything

CVE-2026-102565

T−44d 1 oct. 2026
8,8 Alta

CVE-2026-93546: desbordamiento de enteros en Apache HTTP Server

CVE-2026-93546

T−44d 1 oct. 2026
7,3 Alta

CVE-2026-73637: uso de memoria ya liberada en Apache HTTP Server

CVE-2026-73637

T−44d 1 oct. 2026