Feed live

Joomla vulnerabilities - every known CVE across core and extensions

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Joomla's component-and-module architecture means most disclosed CVEs originate in third-party extensions rather than core. Tracked, scored, and classified as they're published.

Total CVEs tracked

356,133

All time

Critical · Active

12,718

CVSS ≥ 9.0

New · 14 days

2,324

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 91–120 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-65755	—	—	Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension	Jul 23, 2026 2mo ago
CVE-2026-65754	—	—	Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension	Jul 23, 2026 2mo ago
CVE-2026-64875	—	—	Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension	Jul 23, 2026 2mo ago
CVE-2026-64876	—	—	Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension	Jul 23, 2026 2mo ago
CVE-2026-64872	—	—	Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension	Jul 23, 2026 2mo ago
CVE-2026-65712	—	—	Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension	Jul 23, 2026 2mo ago
CVE-2026-65756	—	—	Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension	Jul 23, 2026 2mo ago
CVE-2026-64874	—	—	Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension	Jul 23, 2026 2mo ago
CVE-2026-64799	—	—	Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions	Jul 23, 2026 2mo ago
CVE-2026-65430	—	—	Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension	Jul 23, 2026 2mo ago
CVE-2026-65431	—	—	Joomla Extension - regularlabs.com - Zipslip in GeoIP extension	Jul 23, 2026 2mo ago
CVE-2026-64793	—	—	Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions	Jul 22, 2026 2mo ago
CVE-2026-64794	—	—	Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions	Jul 22, 2026 2mo ago
CVE-2026-64797	—	—	Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension	Jul 22, 2026 2mo ago
CVE-2026-63265	—	—	Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints	Jul 22, 2026 2mo ago
CVE-2026-63685	—	—	Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension	Jul 22, 2026 2mo ago
CVE-2026-63280	—	—	Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager	Jul 22, 2026 2mo ago
CVE-2026-64796	—	—	Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension	Jul 22, 2026 2mo ago
CVE-2026-63683	—	—	Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager	Jul 22, 2026 2mo ago
CVE-2026-64798	—	—	Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension	Jul 22, 2026 2mo ago
CVE-2026-64795	—	—	Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions	Jul 22, 2026 2mo ago
CVE-2026-64792	—	—	Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions	Jul 22, 2026 2mo ago
CVE-2026-63281	—	—	Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager	Jul 22, 2026 2mo ago
CVE-2026-64791	—	—	Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager	Jul 22, 2026 2mo ago
CVE-2026-63684	—	—	Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension	Jul 22, 2026 2mo ago
CVE-2026-63264	medium	5.3/10	Joomla Extension - joomshopping.com - Reflective XSS in JoomShopping < 5.9.3	Jul 22, 2026 2mo ago
CVE-2026-63048	critical	9.4/10	Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2	Jul 22, 2026 2mo ago
CVE-2026-63047	—	—	Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1	Jul 22, 2026 2mo ago
CVE-2026-62415	—	—	Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2	Jul 21, 2026 2mo ago
CVE-2026-61425	critical	9.4/10	Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0	Jul 20, 2026 3mo ago