Exposición de Joomla

CMS
1616
score de exposición
84.613
sitios usan
6
en explotación
108
críticos

CVEs

560 resultados
CVE-2026-65879CRITICALJoomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1EPSS 0.5%CVE-2026-64796CRITICALJoomla Extension - regularlabs.com - various code injection vectors in Sourcerer extensionEPSS 0.5%CVE-2024-21722MEDIUM[20240201] - Core - Insufficient session expiration in MFA management viewsEPSS 0.5%CVE-2026-78082CRITICALJoomla Extension - joomshaper.com - Unauthenticated SQL Injection in Property Search and Map Filtering in SP Property < 4.1.4EPSS 0.5%CVE-2025-22210HIGHExtension - hikashop.com - SQL injection in Hikashop component version 3.3.0 - 5.1.4 for JoomlaEPSS 0.5%CVE-2023-39974—Extension - acymailing.com - Exposure of Sensitive Information in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3EPSS 0.5%CVE-2026-67285CRITICALJoomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0EPSS 0.5%CVE-2026-65754HIGHJoomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extensionEPSS 0.5%CVE-2026-84048MEDIUMJoomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.2EPSS 0.5%CVE-2026-65890CRITICALJoomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2EPSS 0.5%CVE-2026-66494HIGHJoomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0EPSS 0.5%CVE-2021-26034—[20210503] - Core - CSRF in data download endpointsEPSS 0.5%CVE-2021-26033—[20210502] - Core - CSRF in AJAX reordering endpointEPSS 0.5%CVE-2026-67364CRITICALJoomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2EPSS 0.5%CVE-2026-76606CRITICALJoomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2EPSS 0.5%CVE-2026-57830HIGHJoomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7EPSS 0.5%CVE-2026-81568HIGHJoomla Extension - j2commerce.com - Arbitrary file read via `task=download` in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7EPSS 0.5%CVE-2026-78085MEDIUMJoomla Extension - joomshaper.com - Path Traversal in Gallery Image Management in SP Property < 4.1.4EPSS 0.5%CVE-2026-76611MEDIUMJoomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo < 4.1.66EPSS 0.5%CVE-2025-49468HIGHJoomla Extension - nobossextensions.com - SQL injection vulnerability in No Boss Calendar component before 5.0.7 for JoomlaEPSS 0.5%