Joomla vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
37 matching records
- Critical10.0Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.55Patch nowKEVEPSS 0.77%Oct 22, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.04%Oct 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.43%Sep 22, 2026
- Unknownbalbooa gridbox Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.52%Jul 29, 2026
- Unknownbalbooa gridbox Improper Access ControlPatch nowKEVEPSS 0.52%Jul 29, 2026
- Critical10.0Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 14.85%Jul 8, 2026
- High7.5ollyo helix3 Improper Access ControlPatch nowKEVEPSS 0.99%Jun 29, 2026
- Critical10.0Joomlack Page Builder Improper Access Control VulnerabilityPatch nowKEVEPSS 30.87%Jun 27, 2026
- Critical10.0iCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 20.07%Jun 20, 2026
- Critical10.0JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 88.51%Jun 15, 2026
- Critical10.0Widget Factory Joomla Content Editor Improper Access Control VulnerabilityPatch nowKEVEPSS 85.44%Jun 5, 2026
- Critical9.3nextendweb smart_slider_3 Embedded Malicious CodePatch nowKEVEPSS 0.55%Apr 7, 2026
- Unknownhelpdesk_pro_project helpdesk_pro Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 56.51%Sep 19, 2024
- UnknownWP Meta SEO plugin for WordPress Stored Cross-Site ScriptingPatch nowKEVEPSS 0.45%May 29, 2024
- Medium5.3Joomla! Improper Access Control VulnerabilityPatch nowKEVEPSS 99.81%Feb 16, 2023
- Unknowngmapfp gmapfp Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 31.44%Apr 12, 2021
- Unknownjoomlaworks k2 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.31%Apr 12, 2021
- Unknownmlwebtechnologies prayercenter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 57.75%Apr 12, 2021
- Unknownzh_baidumap_project zh_baidumap Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 57.70%Apr 12, 2021
- Unknowncodextrous b2j_contact Improper Input ValidationPatch nowKEVEPSS 3.57%Apr 12, 2021
- Unknowncreative-solutions creative_contact_form Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 91.86%Feb 8, 2020
- Critical9.8arkextensions jck_editor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 82.98%Sep 20, 2018
- Critical9.8Joomla! Joomla! Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 99.83%May 17, 2017
- Critical9.8PHPMailer Command Injection VulnerabilityPatch nowKEVEPSS 99.71%Dec 30, 2016
- UnknownJoomla! Joomla! Improper Input ValidationPatch nowKEVEPSS 81.14%Oct 28, 2016