Vulnérabilités

Vulnérabilités

Joomla CMS et extensions — une fiche par CVE, toutes sources fusionnées.

1619 résultats

CVE-2026-64798 Insecure login URL keys in IP login extension Extension Joomla — regularlabs.com · 1 source · CRITICAL CVSS 9.1 CVE-2026-64797 IP spoofing vulnerability in IP login extension Extension Joomla — regularlabs.com · 1 source · HIGH CVSS 7.5 CVE-2026-64796 various code injection vectors in Sourcerer extension Extension Joomla — regularlabs.com · 1 source · CRITICAL CVSS 9.8 CVE-2026-64795 XSS vectors in tag-provided inputs in various Regular Labs extensions Extension Joomla — regularlabs.com · 1 source · MEDIUM CVSS 5.4 CVE-2026-64794 restricted user-data exposure in Users Anywhere and Articles Anywhere extensions Extension Joomla — regularlabs.com · 1 source · MEDIUM CVSS 6.5 CVE-2026-64793 Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions Extension Joomla — regularlabs.com · 1 source · CRITICAL CVSS 9.1 CVE-2026-64792 disclosure of restricted content via search index in various Regular Labs extensions Extension Joomla — regularlabs.com · 1 source · HIGH CVSS 7.5 CVE-2026-64791 Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager Extension Joomla — regularlabs.com · 1 source · HIGH CVSS 8.8 CVE-2026-63685 Authorization bypass in DB Replacer extension Extension Joomla — regularlabs.com · 1 source · HIGH CVSS 8.8 CVE-2026-63684 Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension Extension Joomla — regularlabs.com · 1 source · HIGH CVSS 8.8 CVE-2026-63683 Client IP spoofing vulnerability in Regular Labs conditions manager Extension Joomla — regularlabs.com · 1 source · HIGH CVSS 7.5 CVE-2026-63281 XSS vulnerability in Regular Labs conditions manager Extension Joomla — regularlabs.com · 1 source · MEDIUM CVSS 4.8 CVE-2026-63280 Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager Extension Joomla — regularlabs.com · 1 source · HIGH CVSS 8.8 CVE-2026-63265 Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints Extension Joomla — regularlabs.com · 1 source · HIGH CVSS 8.0 CVE-2026-63264 Reflective XSS in JoomShopping < 5.9.3 Extension Joomla — joomshopping.com · 1 source · MEDIUM CVSS 5.3 CVE-2026-63048 Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 Extension Joomla — joomlack.fr · 1 source · CRITICAL CVSS 9.4 CVE-2026-63047 Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 Extension Joomla — joomdonation.com · 1 source · HIGH CVSS 7.5 CVE-2026-62415 Insecure default configuration Membership Pro < 4.6.2 Extension Joomla — joomdonation.com · 1 source · CRITICAL CVSS 9.1 CVE-2026-62414 Improper access control in Page Builder CK < 3.6.2 Extension Joomla — joomlack.fr · 1 source · CRITICAL CVSS 9.1 CVE-2026-61901 Open redirect in Hikashop < 6.5.2 Extension Joomla — hikashop.com · 1 source · MEDIUM CVSS 6.1