SecAlerts
o

ordasoft

Security Risk Profile

68
/100
high

Security Risk Score

Comprehensive risk assessment based on 19 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from July 28, 2009 to present

19
Total CVEs
15
Critical+High
0
Exploited
14
Unpatched

Threat Assessment

Avg CVSS
8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
14
Critical/High
Risk Level
68/100
high
📈 2 in Last 30 Days

Severity Distribution

Critical
8
High
7
Medium
4
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
0

Age Distribution

Common Weaknesses (CWE)

1
SQL Injection
9
2
Code Injection
5
3
XSS
3
4
CSRF
1
5
Malicious File Upload
1

Most Affected Products

1. ordasoft Com Booklibrary4
2. ordasoft Joomla CCK2
3. ordasoft Joomla Cck Joomla\!2
4. ordasoft Book Library (Free)2
5. ordasoft Book Library Joomla\!2

Recent Vulnerabilities

See more →
CVE-2026-102782
CVSS 9.3critical

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0

Oct 7, 2026🔧 No Patch
CVE-2026-102781
CVSS 6.9medium

Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6

Oct 7, 2026🔧 No Patch
CVE-2026-102428
CVSS 9.3critical

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16

Oct 5, 2026🔧 No Patch
CVE-2026-102427
CVSS 10.0critical

Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16

Sep 30, 2026🔧 No Patch
CVE-2026-101111
CVSS 5.3medium

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6

Sep 28, 2026🔧 No Patch
CVE-2026-101109
CVSS 5.3medium

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8

Sep 28, 2026🔧 No Patch
CVE-2026-101110
CVSS 9.3critical

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6

Sep 28, 2026🔧 No Patch
CVE-2026-100753
CVSS 5.3medium

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9

Sep 28, 2026🔧 No Patch
CVE-2026-100752
CVSS 9.3critical

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9

Sep 28, 2026🔧 No Patch
CVE-2026-101108
CVSS 9.3critical

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8

Sep 28, 2026🔧 No Patch

Monitor ordasoft in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.