Alertas de Seguridad de la Información

M Crítico vulnerabilidad Nuevo

Ahora mismo

[CVE-2026-103889] The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execut…

The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpv_image' parameter parameter. This is due to missing authentication and nonce checks on the wp_loaded handler combined with no sanitization of the xpv_image POST parameter before it is echoed unescaped into a Dompdf-rendered HTML template w…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad Nuevo

Ahora mismo

[CVE-2026-94589] The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for Word…

The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.4.5 via the extcf7_submit function. This is due to missing file extension, MIME type, and size validation in the signature field's validation_filter(), combined with the absence of PHP-execution guards in the upload…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad Nuevo

Ahora mismo

[CVE-2026-107645] The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, …

The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the implement_user_registration() AJAX handler explicitly disabling Dokan's vendor-registration nonce check (via add_filter('dokan_register_nonce_check', '__return_false')) and then trusting an attacker-supplied $_POST['role'] value when invoking wc_create_new_cu…

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Crítico vulnerabilidad Nuevo

Ahora mismo

[CVE-2026-104732] The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions …

The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because `handle_login_action()` performs no server-side check — via transient, session marker, or equivalent — that a requester completed step-1 password authentication before processing a step-2 TOTP submission for the POSTed `user_id`; compoun…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad Nuevo

Hace 1 hora

[CVE-2026-108474] In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of sever…

In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad Nuevo

Hace 4 horas

[CVE-2026-108261] Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the /…

Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the /~/* admin preview route in packages/tinacms/src/admin/index.tsx can turn an attacker-controlled hash-router splat into an off-origin iframe URL through packages/@tinacms/app/src/preview.tsx, while packages/@tinacms/app/src/lib/preview-origin.ts derives expectedOrigin from that same URL for the Graph…

nvdcriticovulnerabilidad CVSS 9.3 NVD

M Crítico vulnerabilidad Nuevo

Hace 4 horas

[CVE-2026-108263] Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the…

Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /workflow/v1/run selects LocalExecutor in core/workflow/engine/nodes/code/code_node.py when CODE_EXEC_TYPE is not explicitly changed. LocalExecutor supplies complete Python builtins to dynamic code execution without the docu…

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Crítico vulnerabilidad Nuevo

Hace 4 horas

[CVE-2026-108264] Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other medi…

Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.9.1, wizard step Markdown supplied through the editor or imported bundles was evaluated by app/blueprints/wizard/routes.py in the application's non-sandboxed Jinja2 environment with application globals exposed. An authenticated user able to create steps, or an administrator …

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Crítico vulnerabilidad Nuevo

Hace 5 horas

[CVE-2026-107845] Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, an unauthenticated visitor…

Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, an unauthenticated visitor can submit a comment whose email or website metadata is rendered without sufficient attribute and URL encoding by listComments() in comments-bundle/contao/dca/tl_comments.php. When a backend user opens the Comments module, attacker-controlled script can execute in the Contao backend origin under th…

nvdcriticovulnerabilidad CVSS 9.3 NVD

M Crítico vulnerabilidad Nuevo

Hace 10 horas

[CVE-2026-108109] PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password res…

PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows unauthenticated attackers to brute-force the 6-digit otp_code. Attackers knowing a customer username can guess the code without attempt limits or lockout, then read the newly set password from the HTTP response to hijack the account.

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Crítico vulnerabilidad Nuevo

Hace 10 horas

[CVE-2026-108107] PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.p…

PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw() queries. Attackers can send crafted username, macAddr or nasid parameters to the accounting or authenticate actions to extract customer records and credentials via time-based blind SQL injection.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad Nuevo

Hace 10 horas

[CVE-2026-105278] The published Docker image for openPDC includes a fixed administrative credential with no forced cha…

The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access to the management interface can authenticate using this credential and gain full administrative control of the application.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad Nuevo

Hace 15 horas

Inyección SQL ciega en EduAdmin Booking permite acceso no autorizado a bases de datos

Una vulnerabilidad crítica de inyección SQL (CVE-2026-96809, CVSS 9.3) afecta EduAdmin Booking en versiones anteriores a 6.0.0, permitiendo a atacantes ejecutar consultas SQL maliciosas sin autenticación. Instituciones educativas, centros de capacitación y plataformas de reservas en México y Latinoamérica que utilicen este software están expuestas a exfiltración de datos sensibles y compromisos de bases de datos. La gravedad es crítica debido a la facilidad de explotación remota.

nvdcriticovulnerabilidad CVSS 9.3 NVD

M Crítico vulnerabilidad Nuevo

Hace 15 horas

Inyección SQL ciega en Ajax Search Pro afecta sitios WordPress en LATAM

Una vulnerabilidad crítica de inyección SQL (CVSS 9.3) en el plugin Ajax Search Pro para WordPress permite a atacantes ejecutar consultas SQL ciegas sin autenticación. Afecta versiones hasta 4.29.1 y representa riesgo severo para e-commerce, portales y sitios corporativos que usen este plugin en México y Latinoamérica, exponiendo datos de clientes y configuraciones de base de datos.

nvdcriticovulnerabilidad CVSS 9.3 NVD

M Crítico vulnerabilidad Nuevo

Hace 15 horas

Inyección SQL ciega crítica en plugin WPLMS afecta sitios WordPress en LATAM

Se identificó una vulnerabilidad de inyección SQL ciega (CVE-2026-96327, CVSS 9.3) en VibeThemes WPLMS versiones anteriores a 1.9.9.8.2. Un atacante puede manipular comandos SQL a través de parámetros no sanitizados, comprometiendo bases de datos de sitios educativos y empresariales. Dado que WPLMS es popular en plataformas e-learning de México y LATAM, la exposición es significativa.

nvdcriticovulnerabilidad CVSS 9.3 NVD

M Crítico vulnerabilidad Nuevo

Hace 15 horas

Inyección SQL ciega crítica en tagDiv Opt-In Builder versiones ≤1.7.6

Se ha identificado una vulnerabilidad de inyección SQL ciega (CVE-2026-96330, CVSS 9.3) en tagDiv Opt-In Builder que permite a atacantes ejecutar comandos SQL maliciosos sin validación adecuada de entrada. Esta falla afecta principalmente a sitios WordPress en México y Latinoamérica que utilizan este plugin para gestionar suscripciones y recopilación de datos. Un atacante podría extraer información sensible de bases de datos, comprometer credenciales o alterar registros críticos de clientes.

nvdcriticovulnerabilidad CVSS 9.3 NVD

M Crítico vulnerabilidad Nuevo

Hace 15 horas

[CVE-2026-94503] Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Uploa…

Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web Shell to a Web Server.This issue affects Zombify: from n/a through 1.7.7.

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Crítico vulnerabilidad Nuevo

Hace 15 horas

[CVE-2026-107935] A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-ta…

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.

nvdcriticovulnerabilidad CVSS 9.3 NVD

M Crítico vulnerabilidad Nuevo

Hace 17 horas

CVE-2026-69566 Windows NTFS Remote Code Execution Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-69566 Windows NTFS Remote Code Execution Vulnerability. Tipo: Ejecución Remota de Código (RCE).

windowsrce Microsoft MSRC

M Crítico vulnerabilidad Nuevo

Hace 19 horas

[CVE-2026-107909] A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_…

A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/bolt/buffer.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly corrupt heap memory by sending a WebSocket frame with a 64-bit extended payload length to the Bolt port. The payload length is not bounded, and the only boun…

nvdcriticovulnerabilidad CVSS 9.1 NVD