CVE-2026-62415

CVE-2026-62415: Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2

Vendor Joomdonation.com

Product Membership Pro extension for Joomla

Weakness CWE-1188

Published July 21, 2026

Last update July 23, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2 - The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets.

Key dates

02Disclosure timeline

July 21, 2026 CVE published

July 23, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-62415 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1188.html AskarLabs — CWE-1188 write-up Insecure Default Initialization of Resource

Related vulnerabilities

CVE-2026-62415: Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2

01Description

02Disclosure timeline

03References

04Related CVE