Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

13,949

Total alertas

3186

Críticas

10491

Altas

8

Ransomware

1211

Esta semana

RSS

30 días × Limpiar todo ×

M Alto vulnerabilidad

[CVE-2026-59546] Subscriber Broken Authentication in Hide My WP Ghost <= 7.0.06 versions.

Subscriber Broken Authentication in Hide My WP Ghost

M Alto vulnerabilidad

[CVE-2026-59548] Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking <= 1.0.0 versions.

Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking

M Crítico vulnerabilidad

[CVE-2026-59549] Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.

Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress

M Crítico vulnerabilidad

[CVE-2026-59527] Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.

Unauthenticated SQL Injection in MapSVG

M Alto vulnerabilidad

[CVE-2026-59528] Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates <= 1.1.1 versions.

Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates

M Alto vulnerabilidad

[CVE-2026-59529] Unauthenticated Sensitive Data Exposure in Ebook Store <= 6.19 versions.

Unauthenticated Sensitive Data Exposure in Ebook Store

M Alto vulnerabilidad

[CVE-2026-59530] Unauthenticated Broken Access Control in Stripe For WooCommerce <= 4.0.7 versions.

Unauthenticated Broken Access Control in Stripe For WooCommerce

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Alto vulnerabilidad

[CVE-2026-59531] Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions.

Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks

M Alto vulnerabilidad

[CVE-2026-59532] Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions.

Unauthenticated Other Vulnerability Type in Booking and Rental Manager

M Crítico vulnerabilidad

[CVE-2026-59533] Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions.

Unauthenticated SQL Injection in Relevanssi Light

M Alto vulnerabilidad

[CVE-2026-59534] Unauthenticated Broken Access Control in Post My CF7 Form <= 6.2.0 versions.

Unauthenticated Broken Access Control in Post My CF7 Form

M Crítico vulnerabilidad

[CVE-2026-65879] Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret …

Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 - A hardcoded secret allowed attackers to forge the mail from address of forms.

M Crítico vulnerabilidad

[CVE-2026-61511] vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB…

vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP code by supplying crafted input through the pagenav[pagenumber] parameter. Attackers can exploit the insufficiently restrictive regex filter by using phpfuck-style …

← Anterior 1 … 262 263 264