Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how joomla compares to other vendors in security performance

View Risk Score →

Software

joomla joomla\!
179
joomla
157
joomla joomla
48
joomla joomla core
9
joomla joomla! core
7
joomla! joomla! core
6
joomlaworks k2 joomla\!
4
joomla bsq sitestats
3
joomla!
3
joomla explorer
2
joomla jd-wiki
2
joomla joomla framework
2
joomla! core
2
joomla akobook
1
joomla com beamospetition
1
joomla com casino
1
joomla com comprofiler component
1
joomla com jvcomment
1
joomla com search component
1
joomla convert forms
1
joomla easy shop
1
joomla flash fun component
1
joomla getk2.com k2 extension
1
joomla jambook
1
joomla jim instant messaging component
1
joomla joom12pic component
1
joomla joomla core (com_associations)
1
joomla joomla core (com_finder)
1
joomla joomla core (com_scheduler)
1
joomla joomla radio
1
joomla k2 extension
1
joomla k2 extension (getk2.com)
1
joomla k2 system user plugin (plg_user_k2)
1
joomla letterman subscriber
1
joomla pc cookbook
1
joomla performs component
1
joomla rs gallery2
1
joomla rsfiles
1
joomla taskhopper component
1
joomla tour de france pool
1
joomla xstandard
1
joomla! com dtregister
1
joomla! joomla!
1
joomla! jscalendar
1
joomla-research com jresearch
1
joomla.batjo com shoutbox
1
joomlabear joomulus
1
joomlaboard joomlaboard
1
joomlacomponent.inetlanka com drawroot
1
joomlamart com jacomment
1

Joomla Joomla\!Joomla! Core - [20260706] - XSS in com_installer

Risk 38
Severity
5.9
First published (updated )
CVE-2026-48952

Joomla Joomla\!Joomla! Core - [20260701] - Incorrect Access Control in com_media webservice endpoints

Risk 66
Severity
6.4
First published (updated )
CVE-2026-48947

Joomla Joomla\!Joomla! Core - [20260712] - Incorrect Access Control in com_fields webservice endpoints

Risk 79
Severity
6.4
First published (updated )
CVE-2026-48958

Joomla Joomla\!Joomla! Core - [20260704] - XSS in com_templates

Risk 38
Severity
5.9
First published (updated )
CVE-2026-48950

Joomla! Joomla! CoreJoomla! Core - [20260709] - Incorrect Access Control in com_workflow

Risk 38
Severity
6.4
First published (updated )
CVE-2026-48955
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla Joomla\!Joomla! Core - [20260710] - Incorrect Access Control in com_modules

Risk 66
Severity
6.4
First published (updated )
CVE-2026-48956

Joomla Joomla\!Joomla! Core - [20260711] - Incorrect Access Control in com_privacy webservice endpoints

Risk 79
Severity
6.4
First published (updated )
CVE-2026-48957

Joomla Joomla\!Joomla! Core - [20260705] - XSS in various modalreturn layouts

Risk 38
Severity
5.9
First published (updated )
CVE-2026-48951

Joomla Joomla\!Joomla! Core - [20260707] - XSS in the generic image output layout

Risk 38
Severity
5.9
First published (updated )
CVE-2026-48953

Joomla Joomla\!Joomla! Core - [20260702] - Incorrect Access Control in com_contact vcf download

Risk 79
Severity
6.4
First published (updated )
CVE-2026-48948
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla Joomla\!Joomla! Core - [20260703] - XSS in MFA method management

Risk 38
Severity
5.9
First published (updated )
CVE-2026-48949

Joomla Joomla\!Joomla! Core - [20260708] - XSS through language overrides

Risk 38
Severity
5.9
First published (updated )
CVE-2026-48954

Joomla K2 extensionJoomla Extension - getk2.org - Unauthenticated folder delete in K2 extension for Joomla < 2.26

Risk 40
Severity
6.5
First published (updated )
CVE-2026-48941

Joomla getk2.com K2 extensionJoomla Extension - getk2.org - Privileged RCE vulnerability in K2 extension for Joomla < 2.26

Risk 46
Severity
6.3
First published (updated )
CVE-2026-48946

Joomla K2 extension (getk2.com)Joomla Extension - getk2.org - Exposure of sensitive files via attachment copy in K2 extension for Joomla < 2.26

Risk 38
Severity
6.5
First published (updated )
CVE-2026-48944
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla K2 system user plugin (plg_user_k2)Joomla Extension - getk2.org - Authenticated user property mass-assignment in K2 extension for Joomla < 2.26

Risk 40
Severity
6.5
First published (updated )
CVE-2026-48943

Joomla Easy ShopJoomla! Component Easy Shop 1.2.3 Local File Inclusion

Risk 38
Severity
6.9
First published (updated )
CVE-2019-25760

Joomla Joomla\!Joomla! Core - [20260506] - Authenticated blind SQLi in com_finder

Risk 86
Severity
6.9
First published (updated )
CVE-2026-35221

Joomla Joomla\!Joomla! Framework - [20260519] - Inadequate content filtering within the checkAttribute filter code.

Risk 49
Severity
6.9
First published (updated )
CVE-2026-48903

Joomla Joomla! CoreJoomla! Core - [20260505] - CSRF in user activation endpoint

Risk 21
Severity
4.6
First published (updated )
CVE-2026-35220
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla Joomla\!Joomla! Core - [20260507] - Authenticated blind SQLi in com_tags

Risk 86
Severity
6.9
First published (updated )
CVE-2026-35222

Joomla Joomla\!Joomla! Core - [20260510] - Path traversal in com_media webservice endpoint

Risk 43
Severity
5.9
First published (updated )
CVE-2026-40384

Joomla Joomla\!Joomla! Framework - [20260520] - Inadequate content filtering within the cleanAttributes filter code.

Risk 49
Severity
6.9
First published (updated )
CVE-2026-48905

Joomla Joomla\!Joomla! Core - [20260502] - XSS in com_associations

Risk 49
Severity
6.9
First published (updated )
CVE-2026-25901

Joomla Joomla\!Joomla! Core - [20260515] - Incorrect Access Control in sample data plugins

Risk 86
Severity
5.3
First published (updated )
CVE-2026-48899
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joomla Joomla\!Joomla! Core - [20260516] - Incorrect Access Control in com_scheduler

Risk 66
Severity
6.4
First published (updated )
CVE-2026-48900

Joomla Joomla\!Joomla! Core - [20260501] - XSS in feed modules

Risk 49
Severity
6.9
First published (updated )
CVE-2026-25900

Joomla Joomla\!Joomla! Core - [20260504] - XSS in readmore links

Risk 49
Severity
6.9
First published (updated )
CVE-2026-30895

Joomla Joomla\!Joomla! Core - [20260503] - XSS in com_contenthistory

Risk 49
Severity
6.9
First published (updated )
CVE-2026-30894

Joomla Joomla\!Joomla! Core - [20260302] - SQL injection in com_content articles webservice endpoint

Risk 79
Severity
6.9
First published (updated )
CVE-2026-21630
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203