CVE-2026-56290 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that

CVE-2026-49049 - The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated attackers to

CVE-2026-49048 - The Joomla extension JoomCCK exposes a front-end controller task, that builds two SQL statements by

CVE-2026-48943 - K2 ≤ 2.24 contains a mass-assignment defect in the K2 system user plugin `plg_user_k2`. A Registered

CVE-2026-48940 - A Joomla user with K2 "create item" rights (Author tier by default) can submit an article whose `emb

CVE-2026-48939 - A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the fil

CVE-2026-48908 - A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files

CVE-2023-54357 - Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unau

CVE-2019-25762 - Joomla! Component JoomProject 1.1.3.2 contains an information disclosure vulnerability that allows u

CVE-2019-25761 - Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated at

CVE-2019-25760 - Joomla! Component Easy Shop 1.2.3 contains a local file inclusion vulnerability that allows unauthen

CVE-2019-25759 - Joomla! Component vBizz 1.0.7 contains an SQL injection vulnerability that allows authenticated atta

CVE-2019-25758 - Joomla! Component vBizz 1.0.7 contains an unrestricted file upload vulnerability that allows authent

CVE-2019-25757 - Joomla vWishlist 1.0.1 contains an SQL injection vulnerability that allows authenticated attackers t

CVE-2019-25756 - Joomla! Component vAccount 2.0.2 contains an SQL injection vulnerability that allows unauthenticated

CVE-2019-25755 - Joomla Component vReview 1.9.11 contains an SQL injection vulnerability that allows unauthenticated

CVE-2019-25754 - Joomla Component vRestaurant 1.9.4 contains an SQL injection vulnerability that allows unauthenticat

CVE-2019-25753 - Joomla! Component VMap 1.9.6 contains an SQL injection vulnerability that allows unauthenticated att

CVE-2019-25752 - Joomla! Component J-BusinessDirectory 4.9.7 contains an SQL injection vulnerability that allows unau

CVE-2019-25751 - Joomla Component J-ClassifiedsManager 3.0.5 contains an SQL injection vulnerability that allows unau

CVE-2019-25750 - Joomla Component J-MultipleHotelReservation 6.0.7 contains an SQL injection vulnerability that allow

CVE-2019-25749 - Joomla J-CruisePortal 6.0.4 contains an SQL injection vulnerability that allows authenticated attack

CVE-2019-25748 - Joomla JHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated a

CVE-2017-20282 - Joomla! Component jCart for OpenCart 2.0 contains an SQL injection vulnerability that allows unauthe

CVE-2017-20281 - Joomla! Component Extra Search 2.2.8 contains an SQL injection vulnerability that allows unauthentic

CVE-2017-20280 - Joomla Component Myportfolio 3.0.2 contains an SQL injection vulnerability that allows unauthenticat

CVE-2017-20279 - Joomla Payage 2.05 contains an SQL injection vulnerability that allows unauthenticated attackers to

CVE-2017-20278 - Joomla Component JoomRecipe 1.0.3 contains an SQL injection vulnerability that allows unauthenticate

CVE-2017-20277 - Joomla JoomRecipe 1.0.4 component contains a blind SQL injection vulnerability in the search_author

CVE-2017-20276 - Joomla! Component SIMGenealogy 2.1.5 contains an SQL injection vulnerability that allows unauthentic

CVE-2017-20275 - Joomla! Component PHP-Bridge 1.2.3 contains an SQL injection vulnerability that allows unauthenticat

CVE-2017-20274 - Joomla LMS King Professional 3.2.4.0 contains an SQL injection vulnerability that allows unauthentic

CVE-2017-20273 - Joomla Event Registration Pro Calendar 4.1.3 contains an SQL injection vulnerability that allows una

CVE-2017-20272 - Joomla Ultimate Property Listing 1.0.2 contains an SQL injection vulnerability that allows unauthent

CVE-2017-20271 - Joomla StreetGuessr Game 1.1.8 contains an SQL injection vulnerability that allows unauthenticated a

CVE-2017-20270 - Joomla! Component Twitch Tv 1.1 contains an SQL injection vulnerability that allows unauthenticated

CVE-2017-20269 - Joomla! Component KissGallery 1.0.0 contains an SQL injection vulnerability that allows unauthentica

CVE-2017-20268 - Joomla! Component Zap Calendar Lite 4.3.4 contains an SQL injection vulnerability that allows unauth

CVE-2017-20267 - Joomla! Component Calendar Planner 1.0.1 contains an SQL injection vulnerability that allows unauthe

CVE-2017-20266 - Joomla SP Movie Database 1.3 contains an SQL injection vulnerability that allows unauthenticated att

CVE-2017-20265 - Joomla! Component Flip Wall 8.0 contains an SQL injection vulnerability that allows unauthenticated

CVE-2017-20264 - Joomla! Component Sponsor Wall 8.0 contains an SQL injection vulnerability that allows unauthenticat

CVE-2017-20263 - Joomla! Component FocalPoint Pro/Free 1.2.3 contains an SQL injection vulnerability that allows unau

CVE-2017-20262 - Joomla! Component Ajax Quiz 1.8 contains an SQL injection vulnerability that allows unauthenticated

CVE-2017-20261 - Joomla! Component Bargain Product VM3 1.0 contains an SQL injection vulnerability that allows unauth

CVE-2017-20260 - Joomla! Component Price Alert 3.0.2 contains an SQL injection vulnerability that allows unauthentica

CVE-2017-20259 - Joomla OSDownloads 1.7.4 contains an SQL injection vulnerability that allows unauthenticated attacke

CVE-2017-20258 - Joomla! Component RPC Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows

CVE-2017-20257 - Joomla! Component Quiz Deluxe 3.7.4 contains an SQL injection vulnerability that allows unauthentica

CVE-2017-20256 - Joomla Survey Force Deluxe 3.2.4 contains an SQL injection vulnerability that allows unauthenticated

CVE-2017-20255 - Joomla! Component JB Visa 1.0 contains an SQL injection vulnerability that allows unauthenticated at

CVE-2017-20254 - Joomla! Component User Bench 1.0 contains an SQL injection vulnerability that allows unauthenticated

CVE-2017-20253 - Joomla! Component My Projects 2.0 contains an SQL injection vulnerability that allows unauthenticate

CVE-2017-20252 - Joomla NextGen Editor 2.1.0 contains an SQL injection vulnerability that allows unauthenticated atta

CVE-2026-48907 - A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles fo

CVE-2019-25740 - Joomla com_jsjobs 1.2.6 contains an arbitrary file deletion vulnerability that allows authenticated

CVE-2025-15656 - Incorrect Privilege Assignment vulnerability in Mojoomla School Management allows Privilege Escalati

CVE-2025-15655 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2018-25433 - Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenti

CVE-2018-25381 - Joomla Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows authenticated

CVE-2018-25380 - Joomla Component eXtroForms 2.1.5 contains an SQL injection vulnerability that allows authenticated

CVE-2018-25354 - Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attac

CVE-2018-25351 - Joomla! Component EkRishta 2.10 contains an error-based SQL injection vulnerability that allows unau

CVE-2018-25348 - Joomla! Component Ek Rishta 2.10 contains an SQL injection vulnerability that allows unauthenticated

CVE-2018-25337 - Joomla JoomOCShop 1.0 contains a cross-site request forgery vulnerability that allows attackers to p

CVE-2018-25330 - Joomla! extension EkRishta 2.10 contains persistent cross-site scripting and SQL injection vulnerabi

CVE-2018-25327 - Joomla! Component Js Jobs 1.2.0 contains a cross-site request forgery vulnerability that allows atta

CVE-2020-37226 - Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated

CVE-2020-37224 - Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated

CVE-2020-37219 - Joomla com_fabrik 3.9.11 contains a directory traversal vulnerability that allows unauthenticated at

CVE-2020-37218 - Joomla com_hdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows

CVE-2021-47930 - Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the fo

CVE-2023-54364 - Joomla HikaShop 4.7.4 contains a reflected cross-site scripting vulnerability that allows unauthenti

CVE-2023-54363 - Joomla Solidres 2.13.3 contains a reflected cross-site scripting vulnerability that allows unauthent

CVE-2023-54362 - Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that

CVE-2023-54361 - Joomla iProperty Real Estate 4.1.1 contains a reflected cross-site scripting vulnerability that allo

CVE-2023-54360 - Joomla JLex Review 6.0.1 contains a reflected cross-site scripting vulnerability that allows attacke