Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,181
Total alertas
4701
Críticas
16892
Altas
8
Ransomware
1055
Esta semana
RSS
cwe-89 × Limpiar todo ×
M Alto vulnerabilidad
23/07/2026
[CVE-2026-16765] A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unk…
A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality of the file /OnlineClassroom/loginlinkadmin.php. Executing a manipulation of the argument aid can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Crítico vulnerabilidad
23/07/2026
[CVE-2026-63359] The Appriss Insights (Equifax) Victim Information Notification Exchange (VINE) applications allow an…
The Appriss Insights (Equifax) Victim Information Notification Exchange (VINE) applications allow an unauthenticated attacker to send a specially-crafted request to bypass the login page, access other users' credentials, take over other user accounts, access sensitive PII, and dump other information from the database.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
23/07/2026
[CVE-2026-65532] Shop manager SQL Injection in Persian Woocommerce SMS <= 7.2.2 versions.
Shop manager SQL Injection in Persian Woocommerce SMS
nvdaltovulnerabilidad CVSS 7.6 NVD
M Alto vulnerabilidad
23/07/2026
[CVE-2026-65526] Contributor SQL Injection in Visualizer <= 4.0.6 versions.
Contributor SQL Injection in Visualizer
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
23/07/2026
[CVE-2026-65494] Subscriber SQL Injection in Dokan Pro <= 5.0.2 versions.
Subscriber SQL Injection in Dokan Pro
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
23/07/2026
[CVE-2026-65462] Administrator SQL Injection in Uncanny Automator <= 7.3.2 versions.
Administrator SQL Injection in Uncanny Automator
nvdaltovulnerabilidad CVSS 7.6 NVD
M Alto vulnerabilidad
23/07/2026
[CVE-2026-65450] Contributor SQL Injection in MapSVG <= 8.14.0 versions.
Contributor SQL Injection in MapSVG
nvdaltovulnerabilidad CVSS 8.5 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
23/07/2026
[CVE-2026-65451] Contributor SQL Injection in MapSVG <= 8.14.0 versions.
Contributor SQL Injection in MapSVG
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
23/07/2026
[CVE-2026-65454] Contributor SQL Injection in Quiz And Survey Master <= 11.2.0 versions.
Contributor SQL Injection in Quiz And Survey Master
nvdaltovulnerabilidad CVSS 8.5 NVD
M Crítico vulnerabilidad
23/07/2026
[CVE-2026-61948] Unauthenticated SQL Injection in WPDM – Premium Packages <= 6.2.0 versions.
Unauthenticated SQL Injection in WPDM – Premium Packages
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
23/07/2026
[CVE-2026-61949] Unauthenticated SQL Injection in Bookly <= 27.7 versions.
Unauthenticated SQL Injection in Bookly
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
23/07/2026
[CVE-2026-61950] Unauthenticated SQL Injection in TrueBooker <= 1.2.3 versions.
Unauthenticated SQL Injection in TrueBooker
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
23/07/2026
[CVE-2026-59514] Unauthenticated SQL Injection in Buddyboss Platform <= 3.0.5 versions.
Unauthenticated SQL Injection in Buddyboss Platform
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
23/07/2026
[CVE-2026-59525] Unauthenticated SQL Injection in Participants Database <= 2.7.8.3 versions.
Unauthenticated SQL Injection in Participants Database
nvdcriticovulnerabilidad CVSS 9.3 NVD
M Crítico vulnerabilidad
23/07/2026
[CVE-2026-59526] Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.
Unauthenticated SQL Injection in MapSVG
nvdcriticovulnerabilidad CVSS 9.3 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
23/07/2026
[CVE-2026-25405] Contributor SQL Injection in eRoom <= 1.7.1 versions.
Contributor SQL Injection in eRoom
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
23/07/2026
[CVE-2026-24552] Contributor SQL Injection in Create by Mediavine <= 2.5.3 versions.
Contributor SQL Injection in Create by Mediavine
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
23/07/2026
[CVE-2026-9713] The Lumise Product Designer for WooCommerce plugin for WordPress is vulnerable to SQL Injection via …
The Lumise Product Designer for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' and 'table' parameters in the uploaded cart JSON file processed by the checkout AJAX action in versions up to, and including, 2.1.1. This is due to insufficient escaping on the user-supplied parameters before they are appended directly to a raw SQL query in the find_resource() function — th…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Crítico vulnerabilidad
22/07/2026
[CVE-2026-2395] Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability i…
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows SQL Injection. This issue affects No Code Platform: from 4.1.3 before 4.1.4.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
22/07/2026
[CVE-2026-12987] The Events Manager WordPress plugin before 7.3.7 does not safely handle booking-registration data o…
The Events Manager WordPress plugin before 7.3.7 does not safely handle booking-registration data on sites using No-User-Account Booking Mode: a booker-supplied registration field is stored as booking meta and later deserialized without restricting allowed classes, enabling PHP object injection. The resulting gadget chain reaches a database query that is built without parameterisation, so an unau…
nvdaltovulnerabilidad CVSS 7.5 NVD