Vulnérabilités
Joomla CMS et extensions — une fiche par CVE, toutes sources fusionnées.
CVE-2026-64798
Insecure login URL keys in IP login extension
CRITICAL
CVSS 9.1
CVE-2026-64797
IP spoofing vulnerability in IP login extension
HIGH
CVSS 7.5
CVE-2026-64796
various code injection vectors in Sourcerer extension
CRITICAL
CVSS 9.8
CVE-2026-64795
XSS vectors in tag-provided inputs in various Regular Labs extensions
MEDIUM
CVSS 5.4
CVE-2026-64794
restricted user-data exposure in Users Anywhere and Articles Anywhere extensions
MEDIUM
CVSS 6.5
CVE-2026-64793
Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions
CRITICAL
CVSS 9.1
CVE-2026-64792
disclosure of restricted content via search index in various Regular Labs extensions
HIGH
CVSS 7.5
CVE-2026-64791
Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager
HIGH
CVSS 8.8
CVE-2026-63685
Authorization bypass in DB Replacer extension
HIGH
CVSS 8.8
CVE-2026-63684
Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension
HIGH
CVSS 8.8
CVE-2026-63683
Client IP spoofing vulnerability in Regular Labs conditions manager
HIGH
CVSS 7.5
CVE-2026-63281
XSS vulnerability in Regular Labs conditions manager
MEDIUM
CVSS 4.8
CVE-2026-63280
Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager
HIGH
CVSS 8.8
CVE-2026-63265
Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints
HIGH
CVSS 8.0
CVE-2026-63264
Reflective XSS in JoomShopping < 5.9.3
MEDIUM
CVSS 5.3
CVE-2026-63048
Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2
CRITICAL
CVSS 9.4
CVE-2026-63047
Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1
HIGH
CVSS 7.5
CVE-2026-62415
Insecure default configuration Membership Pro < 4.6.2
CRITICAL
CVSS 9.1
CVE-2026-62414
Improper access control in Page Builder CK < 3.6.2
CRITICAL
CVSS 9.1
CVE-2026-61901
Open redirect in Hikashop < 6.5.2
MEDIUM
CVSS 6.1