Where
-Infinity
0

Trending

Last week
Last month
Last year

composer/joomla/database[20250401] - Joomla Framework - SQL injection vulnerability in quoteNameStr method of Database package

Risk 86
Severity
9.8
First published (updated )
CVE-2025-25226

composer/joomla/joomla-cms[20250402] - Joomla Core - MFA Authentication Bypass

Risk 43
Severity
7.5
First published (updated )
CVE-2025-25227

Regular Labs SourcererExtension - regularlabs.com - Remote code execution vulnerability in the Sourcerer extensions < 12.0.0 for Joomla

Risk 86
Severity
9.8
First published (updated )
CVE-2025-22204

Joomla Joomla\![20250103] - Core - Read ACL violation in multiple core views

Risk 43
Severity
7.5
First published (updated )
CVE-2024-40749

Joomla Joomla\![20250101] - Core - XSS vectors in module chromes

Risk 38
Severity
6.1
First published (updated )
CVE-2024-40747
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla Joomla\![20250102] - Core - XSS vector in the id attribute of menu lists

Risk 43
Severity
7.5
First published (updated )
CVE-2024-40748

Joomla Joomla\![20240802] - Core - Cache Poisoning in Pagination

Risk 66
Severity
9.1
First published (updated )
CVE-2024-27185

Joomla Joomla\![20240803] - Core - XSS in HTML Mail Templates

Risk 38
Severity
6.1
First published (updated )
CVE-2024-27186

Joomla Joomla\![20240801] - Core - Inadequate validation of internal URLs

Risk 38
Severity
6.1
First published (updated )
CVE-2024-27184

Joomla Joomla\![20240805] - Core - XSS vectors in Outputfilter::strip* methods

Risk 38
Severity
6.1
First published (updated )
CVE-2024-40743
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla Joomla\![20240804] - Core - Improper ACL for backend profile view

Risk 43
Severity
7.5
First published (updated )
CVE-2024-27187

Joomla Joomla\![20240702] - Core - Self-XSS in fancyselect list field layout

Risk 34
Severity
5.4
First published (updated )
CVE-2024-21730

Joomla Joomla\![20240704] - Core - XSS in Wrapper extensions

Risk 38
Severity
6.1
First published (updated )
CVE-2024-26279

Joomla Joomla\![20240703] - Core - XSS in StringHelper::truncate method

Risk 38
Severity
6.1
First published (updated )
CVE-2024-21731

Joomla Joomla\![20240202] - Core - Open redirect in installation application

Risk 22
Severity
4.3
First published (updated )
CVE-2024-21723
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla Joomla\![20240204] - Core - XSS in mail address outputs

Risk 39
Severity
6.1
First published (updated )
CVE-2024-21725

Joomla Joomla\![20240203] - Core - XSS in media selection fields

Risk 38
Severity
6.1
First published (updated )
CVE-2024-21724

Joomla Joomla\![20240201] - Core - Insufficient session expiration in MFA management views

Risk 46
Severity
6.3
First published (updated )
CVE-2024-21722

Joomla Joomla\![20240205] - Core - Inadequate content filtering within the filter code

Risk 41
Severity
6.5
First published (updated )
CVE-2024-21726

Joomla Joomla\![20231101] - Core - Exposure of environment variables

Risk 43
Severity
7.5
First published (updated )
CVE-2023-40626
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla Joomla\![20230501] - Core - Open Redirect and XSS within the mfa select

Risk 38
Severity
6.1
First published (updated )
CVE-2023-23754

Joomla Joomla\![20230502] - Core - Bruteforce prevention within the mfa screen

Risk 43
Severity
7.5
First published (updated )
CVE-2023-23755

Joomla Joomla\![20230102] - Core - Missing ACL checks for com_actionlogs

Risk 22
Severity
4.3
First published (updated )
CVE-2023-23751

Joomla Joomla\![20230101] - Core - CSRF within post-installation messages

Risk 45
Severity
6.3
First published (updated )
CVE-2023-23750

Joomla Joomla\![20221101] - Core - RXSS through reflection of user input in com_media

Risk 38
Severity
6.1
First published (updated )
CVE-2022-27914
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla Joomla\![20221002] - Core - RXSS through reflection of user input in headings

Risk 38
Severity
6.1
First published (updated )
CVE-2022-27913

Joomla Joomla\![20221001] - Core - Debug Mode leaks full request payloads including passwords

Risk 27
Severity
5.3
First published (updated )
CVE-2022-27912

Joomla Joomla\!SQL Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2010-1435

Joomla Joomla\!Joomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to hi…

Risk 43
Severity
7.5
First published (updated )
CVE-2010-1434

Joomla Joomla\!Malicious File Upload

Risk 86
Severity
9.8
First published (updated )
CVE-2010-1433
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203