Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.1Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code thr…EPSS 0.3%May 13, 2026
- High7.1Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code thr…EPSS 0.3%May 13, 2026
- High8.7Joomla com_fabrik 3.9.11 contains a directory traversal vulnerability that allows unauthenticated attackers to list arbitrary files by manipulating the folder parameter.EPSS 0.7%May 13, 2026
- High8.8Joomla com_hdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries by injec…EPSS 0.3%May 13, 2026
- High8.8Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handler that allows remote attackers to execute arbit…EPSS 0.3%May 10, 2026
- Critical9.3Smart Slider 3 Pro version 3.5.1.35 for WordPress and Joomla contains a multi-stage remote access toolkit injected through a compromised update system that allows unau…Apr 9, 2026
- Medium5.1Joomla HikaShop 4.7.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating GET par…EPSS 0.2%Apr 9, 2026
- Medium5.1Joomla Solidres 2.13.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating multip…EPSS 0.2%Apr 9, 2026
- Medium5.1Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the ke…EPSS 0.2%Apr 9, 2026
- Medium5.1Joomla iProperty Real Estate 4.1.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the filter…EPSS 0.2%Apr 9, 2026
- Medium5.1Joomla JLex Review 6.0.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the review_id URL parameter.EPSS 0.2%Apr 9, 2026
- High8.6An improper access check allows unauthorized access to webservice endpoints.Apr 1, 2026
- High8.6Lack of input validation leads to an arbitrary file deletion vulnerability in the autoupdate server mechanism.Apr 1, 2026
- Medium5.9Lack of output escaping for article titles leads to XSS vectors in various locations.EPSS 0.2%Apr 1, 2026
- Medium5.9Lack of output escaping leads to a XSS vector in the multilingual associations component.EPSS 0.2%Apr 1, 2026
- Medium6.9Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint.EPSS 0.3%Apr 1, 2026
- Medium6.3The ajax component was excluded from the default logged-in-user check in the administrative area.EPSS 0.2%Apr 1, 2026
- Critical9.5The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point.EPSS 1.6%Feb 20, 2026
- Medium5.3Joomla! Improper Access Control VulnerabilityKEVEPSS 99.8%Feb 16, 2023
- Critical9.8PHPMailer Command Injection VulnerabilityKEVEPSS 99.7%Dec 30, 2016
95 records · page 4 of 4
PreviousNext