p
phoca
Security Risk Profile
65
/100
highSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 23, 2009 to present
4
Total CVEs
3
Critical+High
0
Exploited
3
Unpatched
Threat Assessment
Avg CVSS
8.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
65/100
high
Severity Distribution
Critical
2High
1Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Malicious File Upload
2
2
XSS
1
3
SQL Injection
1
Most Affected Products
1. Phoca Com Phocadocumentation2
2. Joomla extension Phoca Downloads (RSFiles component)1
3. Phoca Download Joomla\!1
4. phoca.cz Phoca Maps1
5. Phoca maps1
Recent Vulnerabilities
See more →CVE-2026-57828
CVSS 9.0critical
Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3
Jul 11, 2026🔧 No Patch
CVE-2026-23900
CVSS 6.5medium
Extension - phoca.cz - Stored XSS vectors in Phoca Maps component 5.0.0 - 6.0.2 for Joomla
Apr 11, 2026🔧 No Patch
CVE-2025-54473
CVSS 9.2critical
Extension - phoca.cz - Authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla
Aug 15, 2025🔧 No Patch
CVE-2009-0702
CVSS 7.5high
Feb 23, 2009🔧 No Patch
Monitor phoca in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.