Exposición de Joomla
CMS1616
score de exposición
84.613
sitios usan
6
en explotación
108
críticos
CVEs
560 resultadosCVE-2025-22213HIGH[20250301] - Core - Malicious file uploads via Media ManagerEPSS 0.5%CVE-2025-25226CRITICAL[20250401] - Joomla Framework - SQL injection vulnerability in quoteNameStr method of Database packageEPSS 0.5%CVE-2026-65878HIGHJoomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1EPSS 0.5%CVE-2026-64873CRITICALJoomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extensionEPSS 0.5%CVE-2025-54299CRITICALExtension - nobossextensions.com - Stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for JoomlaEPSS 0.5%CVE-2025-54298CRITICALExtension - firecoders.com - Stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for JoomlaEPSS 0.5%CVE-2026-102783MEDIUMJoomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0EPSS 0.5%CVE-2026-94132CRITICALJoomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0EPSS 0.5%CVE-2026-102428CRITICALJoomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16EPSS 0.5%CVE-2026-66491HIGHJoomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3EPSS 0.5%CVE-2026-75115HIGHJoomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40EPSS 0.5%CVE-2026-81564HIGHJoomla Extension - joomshaper.com - Missing Directory Confinement in Media Rename Allowing Arbitrary File Rename in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0EPSS 0.5%CVE-2026-65765MEDIUMJoomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.1EPSS 0.5%CVE-2026-81565MEDIUMJoomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0EPSS 0.5%CVE-2026-66493MEDIUMJoomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3EPSS 0.5%CVE-2026-118494HIGHJoomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9EPSS 0.5%CVE-2026-97163CRITICALJoomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29EPSS 0.5%CVE-2026-76598HIGHJoomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2EPSS 0.5%CVE-2026-73337HIGHJoomla! Core - [20260807] - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2EPSS 0.5%CVE-2024-26279MEDIUM[20240704] - Core - XSS in Wrapper extensionsEPSS 0.5%