Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how joomla! compares to other vendors in security performance

View Risk Score →

Widgetfactorylimited Jce Joomla\!Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.9.99.10

Risk 38
Severity
6.5
First published (updated )
CVE-2026-65891

Joomla Joomla\!Joomla! Core - [20260701] - Incorrect Access Control in com_media webservice endpoints

Risk 66
Severity
6.4
First published (updated )
CVE-2026-48947

Joomla Joomla\!Joomla! Core - [20260712] - Incorrect Access Control in com_fields webservice endpoints

Risk 79
Severity
6.4
First published (updated )
CVE-2026-48958

Joomla! Joomla! CoreJoomla! Core - [20260709] - Incorrect Access Control in com_workflow

Risk 38
Severity
6.4
First published (updated )
CVE-2026-48955

Joomla Joomla\!Joomla! Core - [20260711] - Incorrect Access Control in com_privacy webservice endpoints

Risk 79
Severity
6.4
First published (updated )
CVE-2026-48957
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla Joomla\!Joomla! Core - [20260705] - XSS in various modalreturn layouts

Risk 38
Severity
5.9
First published (updated )
CVE-2026-48951

Joomla Joomla\!Joomla! Core - [20260702] - Incorrect Access Control in com_contact vcf download

Risk 79
Severity
6.4
First published (updated )
CVE-2026-48948

Joomla! vAccountJoomla! Component vAccount 2.0.2 SQL Injection via vaccount-dashboard

Risk 57
Severity
8.8
First published (updated )
CVE-2019-25756

Joomla! Joomla Component Twitch Tv (com_twitchtv)Joomla! Component Twitch Tv 1.1 SQL Injection

Risk 57
Severity
8.8
First published (updated )
CVE-2017-20270

Joomla! Calendar PlannerJoomla! Component Calendar Planner 1.0.1 SQL Injection

Risk 57
Severity
8.8
First published (updated )
CVE-2017-20267
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla! Flip WallJoomla! Component Flip Wall 8.0 SQL Injection

Risk 48
Severity
7.1
First published (updated )
CVE-2017-20265

Joomla! FocalPoint ProJoomla! FocalPoint Pro Free 1.2.3 SQL Injection via location

Risk 57
Severity
8.8
First published (updated )
CVE-2017-20263

Joomla! Price Alert (Joomla component)Joomla! Component Price Alert 3.0.2 SQL Injection

Risk 57
Severity
8.8
First published (updated )
CVE-2017-20260

composer/joomla/filterJoomla! Core - [20250901] Inadequate content filtering within the checkAttribute filter code

Risk 36
Severity
4.8
First published (updated )
CVE-2025-54476

Joomla Joomla\![20230201] - Core - Improper access check in webservice endpoints

Risk 65
Severity
5.3
Exploited
First published (updated )
CVE-2023-23752
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203