SecAlerts
J

Joomla

Security Risk Profile

53
/100
medium

Security Risk Score

Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from July 21, 2007 to present

1000
Total CVEs
587
Critical+High
4
Exploited
538
Unpatched

Threat Assessment

Avg CVSS
6.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
538
Critical/High
Risk Level
53/100
medium
⚠️ 4 Active Exploits📈 17 in Last 30 Days

Severity Distribution

Critical
52
High
535
Medium
406
Low
7

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
1

Age Distribution

Common Weaknesses (CWE)

1
SQL Injection
405
2
XSS
185
3
Path Traversal
134
4
Code Injection
43
5
Input Validation
34

Most Affected Products

1. Joomla Joomla\!3026
2. Joomla joomla295
3. RSGallery2 Com Rsgallery2118
4. Algisinfo Aicontactsafe59
5. Drupal User Karma module52

Recent Vulnerabilities

See more →
CVE-2026-90915
CVSS 7.0high

Joomla! Core - [20260905] - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Sep 29, 2026
CVE-2026-92226
CVSS 7.0high

Joomla! Core - [20260913] - Core - Improper ACL checks for varous webservice edit tasks in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Sep 29, 2026
CVE-2026-92224
CVSS 5.9medium

Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Sep 29, 2026
CVE-2026-90907
CVSS 6.9medium

Joomla! Core - [20260902] - Core - Unauthorized user account creation via profile.save controller in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3

Sep 29, 2026
CVE-2026-90914
CVSS 5.9medium

Joomla! Core - [20260904] - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Sep 29, 2026
CVE-2026-92231
CVSS 7.1high

Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3

Sep 29, 2026
CVE-2026-90918
CVSS 6.9medium

Joomla! Core - [20260908] - Core - XSS in HTML Mail Templates in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Sep 29, 2026
CVE-2026-92222
CVSS 8.9high

Joomla! Core - [20260909] - Core - SSRF vectors in various core extensions in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Sep 29, 2026
CVE-2026-92223
CVSS 5.1medium

Joomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3

Sep 29, 2026
CVE-2026-90917
CVSS 6.9medium

Joomla! Core - [20260907] - Core - Improper ACL checks in outputs for tagged items in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Sep 29, 2026

Monitor Joomla in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.