Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how joomla compares to other vendors in security performance

View Risk Score →

Software

joomla
395
joomla joomla\!
350
joomla joomla
125
joomla!
29
joomla joomla core
17
joomla joomla! core
8
joomla! joomla! core
6
joomla bsq sitestats
5
joomla rs gallery2
4
joomlahbs hotel booking reservation system
4
joomlaworks k2 joomla\!
4
joomla convert forms
3
joomla akobook
2
joomla com beamospetition
2
joomla ekrishta
2
joomla explorer
2
joomla jd-wiki
2
joomla joomla framework
2
joomla! com astatspro
2
joomla! com downloads
2
joomla! com quiz
2
joomla! core
2
joomla! jscalendar
2
joomla 4analytics
1
joomla acajoom
1
joomla be it easypartner component
1
joomla bibtex
1
joomla car manager
1
joomla chronoforms
1
joomla clantools
1
joomla classifieds component
1
joomla colophon
1
joomla com books
1
joomla com casino
1
joomla com cbe
1
joomla com classifieds
1
joomla com comprofiler component
1
joomla com datsogallery
1
joomla com eventing
1
joomla com events
1
joomla com filebase component
1
joomla com gsticketsystem
1
joomla com hotproperties
1
joomla com jvcomment
1
joomla com libros
1
joomla com marketplace
1
joomla com mosmedia
1
joomla com musica
1
joomla com mycontent
1
joomla com neogallery
1

Joomla Page Builder CKJoomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2

Risk 81
Severity
9.4
First published (updated )
CVE-2026-63048

Joomla ChronoFormsJoomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52

Risk 78
Severity
8.7
First published (updated )
CVE-2026-58148

Joomla 4AnalyticsJoomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2

Risk 78
Severity
8.7
First published (updated )
CVE-2026-58077

Joomla DP CalendarJoomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2

Risk 47
Severity
8.7
First published (updated )
CVE-2026-57831

Joomla Joomla\!Joomla! Core - [20260706] - XSS in com_installer

Risk 38
Severity
5.9
First published (updated )
CVE-2026-48952
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla Joomla\!Joomla! Core - [20260701] - Incorrect Access Control in com_media webservice endpoints

Risk 66
Severity
6.4
First published (updated )
CVE-2026-48947

Joomla Joomla\!Joomla! Core - [20260712] - Incorrect Access Control in com_fields webservice endpoints

Risk 79
Severity
6.4
First published (updated )
CVE-2026-48958

Joomla Joomla\!Joomla! Core - [20260704] - XSS in com_templates

Risk 38
Severity
5.9
First published (updated )
CVE-2026-48950

Joomla! Joomla! CoreJoomla! Core - [20260709] - Incorrect Access Control in com_workflow

Risk 38
Severity
6.4
First published (updated )
CVE-2026-48955

Joomla Joomla\!Joomla! Core - [20260710] - Incorrect Access Control in com_modules

Risk 66
Severity
6.4
First published (updated )
CVE-2026-48956
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla Joomla\!Joomla! Core - [20260711] - Incorrect Access Control in com_privacy webservice endpoints

Risk 79
Severity
6.4
First published (updated )
CVE-2026-48957

Joomla Joomla\!Joomla! Core - [20260705] - XSS in various modalreturn layouts

Risk 38
Severity
5.9
First published (updated )
CVE-2026-48951

Joomla Joomla\!Joomla! Core - [20260707] - XSS in the generic image output layout

Risk 38
Severity
5.9
First published (updated )
CVE-2026-48953

Joomla Joomla\!Joomla! Core - [20260702] - Incorrect Access Control in com_contact vcf download

Risk 79
Severity
6.4
First published (updated )
CVE-2026-48948

Joomla Joomla\!Joomla! Core - [20260703] - XSS in MFA method management

Risk 38
Severity
5.9
First published (updated )
CVE-2026-48949
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla Joomla\!Joomla! Core - [20260708] - XSS through language overrides

Risk 38
Severity
5.9
First published (updated )
CVE-2026-48954

Joomla Helix3 template pluginJoomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler

Risk 43
Severity
7.5
First published (updated )
CVE-2026-49049

Joomla K2 extensionJoomla Extension - getk2.org - Unauthenticated folder delete in K2 extension for Joomla < 2.26

Risk 40
Severity
6.5
First published (updated )
CVE-2026-48941

Joomla getk2.com K2 extensionJoomla Extension - getk2.org - Privileged RCE vulnerability in K2 extension for Joomla < 2.26

Risk 46
Severity
6.3
First published (updated )
CVE-2026-48946

Joomla K2 extension (getk2.com)Joomla Extension - getk2.org - Exposure of sensitive files via attachment copy in K2 extension for Joomla < 2.26

Risk 38
Severity
6.5
First published (updated )
CVE-2026-48944
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla K2 system user plugin (plg_user_k2)Joomla Extension - getk2.org - Authenticated user property mass-assignment in K2 extension for Joomla < 2.26

Risk 40
Severity
6.5
First published (updated )
CVE-2026-48943

Joomla com_bookingJoomla com_booking 2.4.9 Information Disclosure via Account Enumeration

Risk 47
Severity
8.7
First published (updated )
CVE-2023-54357

Joomla Easy ShopJoomla! Component Easy Shop 1.2.3 Local File Inclusion

Risk 38
Severity
6.9
First published (updated )
CVE-2019-25760

Joomla vReviewJoomla vReview 1.9.11 SQL Injection via editReview

Risk 57
Severity
8.8
First published (updated )
CVE-2019-25755

Joomla vRestaurantJoomla vRestaurant 1.9.4 SQL Injection via menu-listing-layout

Risk 57
Severity
8.8
First published (updated )
CVE-2019-25754
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla VMapJoomla! Component VMap 1.9.6 SQL Injection via loadmarker

Risk 57
Severity
8.8
First published (updated )
CVE-2019-25753

Joomla J-MultipleHotelReservationJoomla J-MultipleHotelReservation 6.0.7 SQL Injection

Risk 57
Severity
8.8
First published (updated )
CVE-2019-25750

Joomla J-CruisePortalJoomla J-CruisePortal 6.0.4 SQL Injection via cruises

Risk 49
Severity
7.1
First published (updated )
CVE-2019-25749

Joomla JHotelReservationJoomla JHotelReservation 6.0.7 SQL Injection via search-hotels

Risk 57
Severity
8.8
First published (updated )
CVE-2019-25748

Joomla Extra Search (com_extrasearch)Joomla! Component Extra Search 2.2.8 SQL Injection

Risk 57
Severity
8.8
First published (updated )
CVE-2017-20281
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203