Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "X" — 3560 resultados ✕ Limpiar búsqueda
22,162
Total alertas
4698
Críticas
16876
Altas
8
Ransomware
1045
Esta semana
RSS
Crítica × Limpiar todo ×
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-93945] Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injecti…
Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-93936] Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Inject…
Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-93937] Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injectio…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-93938] Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object In…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-93940] Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Inject…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from n/a through 2.10.0.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-93941] Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injectio…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-93942] Deserialization of Untrusted Data vulnerability in ThemeREX Group Dwell dwell allows Object Injectio…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Dwell dwell allows Object Injection.This issue affects Dwell: from n/a through 1.16.0.
nvdcriticovulnerabilidad CVSS 9.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-93943] Deserialization of Untrusted Data vulnerability in ThemeREX Group Convex convex allows Object Inject…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Convex convex allows Object Injection.This issue affects Convex: from n/a through 1.16.0.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-93944] Deserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Inje…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.This issue affects Camelia: from n/a through 1.2.15.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-93927] Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.Thi…
Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through 1.6.0.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-93929] Deserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object In…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object Injection.This issue affects Travesia: from n/a through 1.1.16.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-93930] Deserialization of Untrusted Data vulnerability in ThemeREX Group Tantra tantra allows Object Inject…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Tantra tantra allows Object Injection.This issue affects Tantra: from n/a through 2.9.0.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-93931] Deserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injectio…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injection.This issue affects Smash: from n/a through 1.12.0.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-93932] Deserialization of Untrusted Data vulnerability in ThemeREX Group Smart Casa smart-casa allows Objec…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Smart Casa smart-casa allows Object Injection.This issue affects Smart Casa: from n/a through 1.0.12.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-93933] Deserialization of Untrusted Data vulnerability in ThemeREX Group Rosalinda rosalinda allows Object …
Deserialization of Untrusted Data vulnerability in ThemeREX Group Rosalinda rosalinda allows Object Injection.This issue affects Rosalinda: from n/a through 1.2.4.
nvdcriticovulnerabilidad CVSS 9.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-93934] Deserialization of Untrusted Data vulnerability in ThemeREX Group Partiso partiso allows Object Inje…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Partiso partiso allows Object Injection.This issue affects Partiso: from n/a through 1.1.13.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-93935] Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Objec…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-104803] The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, …
The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the `uuid` and `code` parameters of the social-login callback handler registered on the `init` hook. The vulnerability exists because the `login` function's social-login flow performs no nonce validation, no OAuth state verification, and no per-visitor namespace isolation i…
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-62045] Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Objec…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This issue affects Booklovers: from n/a through 2.13.0.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad Nuevo
Ahora mismo
[CVE-2026-62046] Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object …
Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object Injection.This issue affects Gutentype: from n/a through 2.1.12.
nvdcriticovulnerabilidad CVSS 9.8 NVD