Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
13,509
Total alertas
3066
Críticas
10171
Altas
8
Ransomware
1797
Esta semana
RSS
Vulnerabilidades × cwe-79 × Limpiar todo ×
M Alto vulnerabilidad
17/06/2026
[CVE-2025-31013] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i…
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themify Folo allows Reflected XSS. This issue affects Themify Folo: from n/a through 1.9.6.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2024-49269] Unauthenticated Cross Site Scripting (XSS) in my flatonica <= 0.0.8 versions.
Unauthenticated Cross Site Scripting (XSS) in my flatonica
nvdaltovulnerabilidad CVSS 7.1 NVD
A Alto vulnerabilidad
17/06/2026
[CVE-2026-48294] Adobe Acrobat PDF Extension (Chrome) versions 26.5.2.2 and earlier are affected by a UXSS-class cros…
Adobe Acrobat PDF Extension (Chrome) versions 26.5.2.2 and earlier are affected by a UXSS-class cross-origin data disclosure vulnerability. An attacker could exploit this vulnerability to gain access to data regarding the victim's session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is cha…
nvdaltovulnerabilidad CVSS 7.4 NVD
O Alto vulnerabilidad
17/06/2026
[CVE-2026-46955] Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Person). …
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Person). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Human Resources. Successful attacks require human interaction from a person other than the attacker. Successful attacks of t…
nvdaltovulnerabilidad CVSS 7.5 NVD
O Crítico vulnerabilidad
17/06/2026
[CVE-2026-46856] Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c…
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Manager Base Platform. Successful attacks require human interaction from a person other…
nvdcriticovulnerabilidad CVSS 9.6 NVD
O Crítico vulnerabilidad
17/06/2026
[CVE-2026-46853] Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c…
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Manager Base Platform. Successful attacks require human interaction from a person other…
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-54191] Unauthenticated Cross Site Scripting (XSS) in Pods <= 3.3.8 versions.
Unauthenticated Cross Site Scripting (XSS) in Pods
nvdaltovulnerabilidad CVSS 7.1 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
16/06/2026
[CVE-2026-54198] Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.35 versions.
Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
16/06/2026
[CVE-2026-39437] Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manager for WooCommerce <…
Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manager for WooCommerce
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-52702] Unauthenticated Cross Site Scripting (XSS) in SEO Redirection <= 9.17 versions.
Unauthenticated Cross Site Scripting (XSS) in SEO Redirection
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-48966] Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-49055] Unauthenticated Cross Site Scripting (XSS) in Drag and Drop Multiple File Upload – Contact Form 7 <=…
Unauthenticated Cross Site Scripting (XSS) in Drag and Drop Multiple File Upload – Contact Form 7
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-48876] Unauthenticated Cross Site Scripting (XSS) in Stop Spammers <= 2026.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Stop Spammers
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-48885] Unauthenticated Cross Site Scripting (XSS) in HollerBox <= 2.3.10.1 versions.
Unauthenticated Cross Site Scripting (XSS) in HollerBox
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-48838] Unauthenticated Cross Site Scripting (XSS) in Post SMTP <= 3.6.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Post SMTP
nvdaltovulnerabilidad CVSS 7.1 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
15/06/2026
[CVE-2026-48867] Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.1.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-48871] Unauthenticated Cross Site Scripting (XSS) in MW WP Form <= 5.1.3 versions.
Unauthenticated Cross Site Scripting (XSS) in MW WP Form
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-45437] Unauthenticated Cross Site Scripting (XSS) in Product Filter Widget for Elementor <= 1.0.6 versions.
Unauthenticated Cross Site Scripting (XSS) in Product Filter Widget for Elementor
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-42775] Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.7.2 versions.
Unauthenticated Cross Site Scripting (XSS) in AutomatorWP
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-42686] Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions.
Subscriber Cross Site Scripting (XSS) in EventPrime
nvdaltovulnerabilidad CVSS 7.1 NVD