Vulnérabilités Joomla

CVE-2026-65885 Authenticated arbitrary file upload in Gridbox < 2.20.2 Gridbox · 1 source · il y a 59 j CRITICAL CVSS 9.4

CVE-2026-65884 Privilege Escalation in Gridbox < 2.20.2 Gridbox · 1 source · il y a 59 j CRITICAL CVSS 10.0

CVE-2026-65883 RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 Aimy Captcha-Less Form Guard · 1 source · il y a 59 j CRITICAL CVSS 10.0

CVE-2026-65882 Reflected XSS vulnerability in Joomdle < 3.1.1 Joomdle · 1 source · il y a 2 mois MEDIUM CVSS 6.1

CVE-2026-65881 Insecure default configuration allows read/write user account access in Joomdle < 3.1.1 Joomdle · 1 source · il y a 2 mois HIGH CVSS 7.5

CVE-2026-65880 Unauthenticated remote code execution in Balbooa Forms < 2.4.3 Balbooa Forms · 1 source · il y a 2 mois CRITICAL CVSS 10.0

CVE-2026-65879 Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 Extension Joomla — joomshaper.com · 1 source · il y a 2 mois CRITICAL CVSS 9.8

CVE-2026-65878 Authenticated arbitrary file delete in SP Page Builder < 6.7.1- Improper path validation and ACL checks lead to a file deletion vector in the media manager. Extension Joomla — joomshaper.com · 1 source · il y a 2 mois HIGH CVSS 8.3

CVE-2026-65877 Authenticated SQL injection in SP Page Builder < 6.7.1 Extension Joomla — joomshaper.com · 1 source · il y a 2 mois HIGH CVSS 8.2

CVE-2026-65876 Unauthenticated SQL injection in SP Page Builder < 6.8.0 Extension Joomla — joomshaper.com · 1 source · il y a 2 mois CRITICAL CVSS 9.2

CVE-2026-65766 Unauthenticated SQL injection in SP Page Builder < 6.7.1 Extension Joomla — joomshaper.com · 1 source · il y a 2 mois CRITICAL CVSS 9.2

CVE-2026-65765 Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 Extension Joomla — phoca.cz · 1 source · il y a 2 mois MEDIUM CVSS 6.9

CVE-2026-65764 Reflected XSS vulnerability in Phoca Commander 5.0.0-6.1.1 Extension Joomla — phoca.cz · 1 source · il y a 2 mois MEDIUM CVSS 5.1

CVE-2026-65763 Reflected XSS vulnerability in Phoca Maps 5.0.0-6.0.4 Extension Joomla — phoca.cz · 1 source · il y a 2 mois MEDIUM CVSS 5.1

CVE-2026-65762 Reflected XSS vulnerability in Phoca Guestbook 5.0.0-6.1.0 Extension Joomla — phoca.cz · 1 source · il y a 2 mois MEDIUM CVSS 5.1

CVE-2026-65761 Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 Extension Joomla — joomshaper.com · 1 source · il y a 2 mois CRITICAL CVSS 9.3

CVE-2026-65760 cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 Extension Joomla — joomshaper.com · 1 source · il y a 2 mois CRITICAL CVSS 9.2

CVE-2026-65759 unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 Extension Joomla — joomshaper.com · 1 source · il y a 2 mois HIGH CVSS 8.7

CVE-2026-65758 Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 Extension Joomla — tassos.gr · 1 source · il y a 2 mois HIGH CVSS 8.2

CVE-2026-65757 Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension Extension Joomla — regularlabs.com · 1 source · il y a 2 mois HIGH CVSS 8.1