Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how joomla compares to other vendors in security performance

View Risk Score →

Software

joomla
210
joomla joomla\!
156
joomla joomla
72
joomla!
26
joomla joomla core
7
joomlahbs hotel booking reservation system
4
joomla rs gallery2
3
joomla bsq sitestats
2
joomla ekrishta
2
joomla! com astatspro
2
joomla! com downloads
2
joomla! com quiz
2
joomla 4analytics
1
joomla acajoom
1
joomla akobook
1
joomla be it easypartner component
1
joomla bibtex
1
joomla car manager
1
joomla chronoforms
1
joomla clantools
1
joomla classifieds component
1
joomla colophon
1
joomla com beamospetition
1
joomla com books
1
joomla com cbe
1
joomla com classifieds
1
joomla com datsogallery
1
joomla com eventing
1
joomla com events
1
joomla com filebase component
1
joomla com gsticketsystem
1
joomla com hotproperties
1
joomla com libros
1
joomla com marketplace
1
joomla com mosmedia
1
joomla com musica
1
joomla com mycontent
1
joomla com neogallery
1
joomla com newsfeeds
1
joomla com newsletter
1
joomla com paxgallery
1
joomla com pcchess
1
joomla com pccookbook
1
joomla com profile
1
joomla com scheduling component
1
joomla com school
1
joomla com sef
1
joomla com waticketsystem
1
joomla com weblinks
1
joomla com_booking
1

Joomla ChronoFormsJoomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52

Risk 78
Severity
8.7
First published (updated )
CVE-2026-58148

Joomla 4AnalyticsJoomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2

Risk 78
Severity
8.7
First published (updated )
CVE-2026-58077

Joomla DP CalendarJoomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2

Risk 47
Severity
8.7
First published (updated )
CVE-2026-57831

Joomla Helix3 template pluginJoomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler

Risk 43
Severity
7.5
First published (updated )
CVE-2026-49049

Joomla com_bookingJoomla com_booking 2.4.9 Information Disclosure via Account Enumeration

Risk 47
Severity
8.7
First published (updated )
CVE-2023-54357
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla vReviewJoomla vReview 1.9.11 SQL Injection via editReview

Risk 57
Severity
8.8
First published (updated )
CVE-2019-25755

Joomla vRestaurantJoomla vRestaurant 1.9.4 SQL Injection via menu-listing-layout

Risk 57
Severity
8.8
First published (updated )
CVE-2019-25754

Joomla VMapJoomla! Component VMap 1.9.6 SQL Injection via loadmarker

Risk 57
Severity
8.8
First published (updated )
CVE-2019-25753

Joomla J-MultipleHotelReservationJoomla J-MultipleHotelReservation 6.0.7 SQL Injection

Risk 57
Severity
8.8
First published (updated )
CVE-2019-25750

Joomla J-CruisePortalJoomla J-CruisePortal 6.0.4 SQL Injection via cruises

Risk 49
Severity
7.1
First published (updated )
CVE-2019-25749
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla JHotelReservationJoomla JHotelReservation 6.0.7 SQL Injection via search-hotels

Risk 57
Severity
8.8
First published (updated )
CVE-2019-25748

Joomla Extra Search (com_extrasearch)Joomla! Component Extra Search 2.2.8 SQL Injection

Risk 57
Severity
8.8
First published (updated )
CVE-2017-20281

Joomla SIMGenealogyJoomla! Component SIMGenealogy 2.1.5 SQL Injection

Risk 57
Severity
8.8
First published (updated )
CVE-2017-20276

Joomla PHP-BridgeJoomla! Component PHP-Bridge 1.2.3 SQL Injection via id Parameter

Risk 57
Severity
8.8
First published (updated )
CVE-2017-20275

Joomla LMS King ProfessionalJoomla LMS King Professional 3.2.4.0 SQL Injection via learningpath

Risk 57
Severity
8.8
First published (updated )
CVE-2017-20274
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla Event Registration Pro CalendarJoomla Event Registration Pro Calendar 4.1.3 SQL Injection

Risk 57
Severity
8.8
First published (updated )
CVE-2017-20273

Joomla Ultimate Property ListingJoomla Ultimate Property Listing 1.0.2 SQL Injection via sf_selectuser_id

Risk 57
Severity
8.8
First published (updated )
CVE-2017-20272

Joomla SP Movie DatabaseJoomla SP Movie Database 1.3 SQL Injection via searchword

Risk 57
Severity
8.8
First published (updated )
CVE-2017-20266

Joomla Sponsor Wall (Joomla component)Joomla! Component Sponsor Wall 8.0 SQL Injection

Risk 48
Severity
7.1
First published (updated )
CVE-2017-20264

Joomla OSDownloadsJoomla OSDownloads 1.7.4 SQL Injection via item view

Risk 57
Severity
8.8
First published (updated )
CVE-2017-20259
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla Quiz DeluxeJoomla! Component Quiz Deluxe 3.7.4 SQL Injection

Risk 57
Severity
8.8
First published (updated )
CVE-2017-20257

Joomla Survey Force DeluxeJoomla Survey Force Deluxe 3.2.4 SQL Injection via invite Parameter

Risk 57
Severity
8.8
First published (updated )
CVE-2017-20256

Joomla My ProjectsJoomla! Component My Projects 2.0 SQL Injection

Risk 57
Severity
8.8
First published (updated )
CVE-2017-20253

Joomla NextGen EditorJoomla NextGen Editor 2.1.0 SQL Injection via plname Parameter

Risk 57
Severity
8.8
First published (updated )
CVE-2017-20252

Joomla com_jsjobsJoomla com_jsjobs 1.2.6 Arbitrary File Deletion

Risk 40
Severity
7.1
First published (updated )
CVE-2019-25740
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla Joomla\!Joomla! Core - [20260511] - MFA Authentication Bypass

Risk 43
Severity
8.2
First published (updated )
CVE-2026-48896

Joomla Joomla\!Joomla! Core - [20260509] - LFI in HTMLView layout parameter

Risk 86
Severity
7.5
First published (updated )
CVE-2026-40383

Joomla Joomla\!Joomla! Core - [20260512] - MFA Authentication Bypass

Risk 43
Severity
8.2
First published (updated )
CVE-2026-48897

Joomla Joomla\!Joomla! Core - [20260508] - Improper access check in com_config webservice endpoints

Risk 86
Severity
8.6
First published (updated )
CVE-2026-35223

Joomla Joomla\!Joomla! Core - [20260514] - Privilege escalation through com_users webservice endpoints

Risk 86
Severity
8.2
First published (updated )
CVE-2026-48904
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203