Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how balbooa compares to other vendors in security performance

View Risk Score →

balbooa.com GridboxJoomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2

Risk 54
Severity
7.3
First published (updated )
CVE-2026-65947

balbooa.com/GridboxJoomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2

Risk 87
Severity
10
First published (updated )
CVE-2026-65888

balbooa.com/GridboxJoomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2

Risk 87
Severity
10
First published (updated )
CVE-2026-65887

balbooa.com/GridboxJoomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2

Risk 49
Severity
9.2
First published (updated )
CVE-2026-65886

balbooa.com GridboxJoomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2

Risk 86
Severity
9.2
First published (updated )
CVE-2026-65890
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla GridboxJoomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2

Risk 27
Severity
5.3
First published (updated )
CVE-2026-66489

balbooa.com GridboxJoomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2

Risk 27
Severity
5.3
First published (updated )
CVE-2026-66488

balbooa.com GridboxJoomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2

Risk 49
Severity
9.2
First published (updated )
CVE-2026-65889

balbooa.com GridboxJoomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2

Risk 38
Severity
6.1
First published (updated )
CVE-2026-66490

Joomla Extension (balbooa.com) - GridboxJoomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2

Risk 87
Severity
10
First published (updated )
CVE-2026-65884
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

balbooa.com/GridboxJoomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2

Risk 75
Severity
9.4
First published (updated )
CVE-2026-65885

BleepingComputerCISA warns of actively exploited RCE flaws in Joomla extensions

Exploited
Zeroday
First published (updated )
News
BleepingComputer

balbooa.com/Balbooa FormsBalbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

Risk 100
Severity
10
Exploited
First published (updated )
CVE-2026-56291

Balbooa Joomla Forms BuilderBalbooa Joomla Forms Builder 2.0.6 SQL Injection Unauthenticated

Risk 57
Severity
8.8
First published (updated )
CVE-2021-47930

Balbooa FormsExtension - balbooa.com - SQL injection in Balbooa Forms component version 1.0.0 - 2.3.1.1 for Joomla

Risk 72
Severity
8.6
First published (updated )
CVE-2025-49485
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Balbooa GalleryExtension - balbooa.com - Stored XSS in Balbooa Gallery component version 1.0.0 - 2.4.0 for Joomla

Risk 72
Severity
8.6
First published (updated )
CVE-2025-49486

Balbooa Gridbox Joomla\!XSS

Risk 38
Severity
6.1
First published (updated )
CVE-2018-11690

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203