Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada hace 9 min
13,434
Total alertas
3054
Críticas
10108
Altas
8
Ransomware
1740
Esta semana
RSS
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59558] Unauthenticated Cross Site Scripting (XSS) in Booking Calendar <= 11.4.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Booking Calendar
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59535] Unauthenticated Broken Access Control in Thrive Product Manager <= 10.9.2 versions.
Unauthenticated Broken Access Control in Thrive Product Manager
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59536] Unauthenticated Broken Access Control in CoCart – Headless ecommerce <= 4.8.4 versions.
Unauthenticated Broken Access Control in CoCart – Headless ecommerce
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59537] Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommer…
Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce
nvdaltovulnerabilidad CVSS 7.6 NVD
M Crítico vulnerabilidad
27/07/2026
[CVE-2026-59538] Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions.
Unauthenticated SQL Injection in GamiPress
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59539] Subscriber Insecure Direct Object References (IDOR) in Paid Member Subscriptions <= 3.0.7 versions.
Subscriber Insecure Direct Object References (IDOR) in Paid Member Subscriptions
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59546] Subscriber Broken Authentication in Hide My WP Ghost <= 7.0.06 versions.
Subscriber Broken Authentication in Hide My WP Ghost
nvdaltovulnerabilidad CVSS 7.4 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59548] Unauthenticated Sensitive Data Exposure in Byteflows Travel &amp; Hotel Booking <= 1.0.0 versions.
Unauthenticated Sensitive Data Exposure in Byteflows Travel &amp; Hotel Booking
nvdaltovulnerabilidad CVSS 7.5 NVD
M Crítico vulnerabilidad
27/07/2026
[CVE-2026-59549] Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
27/07/2026
[CVE-2026-59527] Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.
Unauthenticated SQL Injection in MapSVG
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59528] Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates <= 1.1.1 versions.
Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59529] Unauthenticated Sensitive Data Exposure in Ebook Store <= 6.19 versions.
Unauthenticated Sensitive Data Exposure in Ebook Store
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59530] Unauthenticated Broken Access Control in Stripe For WooCommerce <= 4.0.7 versions.
Unauthenticated Broken Access Control in Stripe For WooCommerce
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59531] Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions.
Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59532] Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions.
Unauthenticated Other Vulnerability Type in Booking and Rental Manager
nvdaltovulnerabilidad CVSS 7.5 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Crítico vulnerabilidad
27/07/2026
[CVE-2026-59533] Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions.
Unauthenticated SQL Injection in Relevanssi Light
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59534] Unauthenticated Broken Access Control in Post My CF7 Form <= 6.2.0 versions.
Unauthenticated Broken Access Control in Post My CF7 Form
nvdaltovulnerabilidad CVSS 7.5 NVD
M Crítico vulnerabilidad
27/07/2026
[CVE-2026-65879] Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret …
Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 - A hardcoded secret allowed attackers to forge the mail from address of forms.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
27/07/2026
[CVE-2026-61511] vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB…
vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP code by supplying crafted input through the pagenav[pagenumber] parameter. Attackers can exploit the insufficiently restrictive regex filter by using phpfuck-style …
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
27/07/2026
[CVE-2026-59687] An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Objec…
An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the Geo Location management interface, potentially resulting in complete system compromise.
nvdaltovulnerabilidad CVSS 8.4 NVD