Feed live

Joomla vulnerabilities - every known CVE across core and extensions

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Joomla's component-and-module architecture means most disclosed CVEs originate in third-party extensions rather than core. Tracked, scored, and classified as they're published.

Total CVEs tracked

339,693

All time

Critical · Active

10,849

CVSS ≥ 9.0

New · 14 days

2,590

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 151–177 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-21727	—	—	Extension - digtal-peak.com - XSS vulnerability in DP Calendar component for Joomla 8.0.0-8.0.14	Feb 15, 2024 2y ago
CVE-2023-40627	—	—	Extension - MLWebTechnologies - Reflected XSS in LivingWord component for Joomla 1.0.0-3.0.0	Dec 14, 2023 2y ago
CVE-2023-40659	—	—	Extension - joomboost.com - Reflected XSS in Easy Quick Contact module for Joomla 1.0.0-1.3.0	Dec 14, 2023 2y ago
CVE-2023-40658	—	—	Extension - deconf.net - Reflected XSS in Clicky Analytics Dashboard module for Joomla 1.0.0-1.3.1	Dec 14, 2023 2y ago
CVE-2023-40629	—	—	Extension - king-products.net - SQLi vulnerability in LMS Lite component for Joomla 1.0.0-3.3.0.1	Dec 14, 2023 2y ago
CVE-2023-40628	—	—	Extension - Extplorer.net - Reflected XSS in Extplorer component for Joomla 1.0.0-2.1.15	Dec 14, 2023 2y ago
CVE-2023-49708	—	—	Extension - joomstar.com - SQLi vulnerability in Starshop component for Joomla 1.0.0-1.0.9	Dec 14, 2023 2y ago
CVE-2023-49707	—	—	Extension - joomlart.com - SQLi vulnerability in S5 Register module for Joomla 1.0.0-3.0.0	Dec 14, 2023 2y ago
CVE-2023-40656	—	—	Extension - plasma-web.ru - Reflected XSS in Quickform component for Joomla 1.0.0-3.3.01	Dec 14, 2023 2y ago
CVE-2023-40657	—	—	Extension - artio.net - Reflected XSS in Joomdoc component for Joomla 1.0.0-4.0.5	Dec 14, 2023 2y ago
CVE-2023-40655	—	—	Extension - mooj.org - Reflected XSS in Proforms Basic component for Joomla <= 1.6.0	Dec 14, 2023 2y ago
CVE-2023-40630	—	—	Extension - joomcode.com - Unauthenticated LFI/SSRF in JCDashboards component for Joomla 1.0.0-1.1.30	Dec 14, 2023 2y ago
CVE-2023-39971	—	—	Extension - acymailing.com - XSS in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3	Aug 17, 2023 2y ago
CVE-2023-39974	—	—	Extension - acymailing.com - Exposure of Sensitive Information in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3	Aug 17, 2023 2y ago
CVE-2023-39972	—	—	Extension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3	Aug 17, 2023 2y ago
CVE-2023-39973	—	—	Extension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3	Aug 17, 2023 2y ago
CVE-2023-39970	—	—	Extension - acymailing.com - RCE in AcyMailing component for Joomla 6.7.0-8.5.0	Aug 17, 2023 2y ago
CVE-2023-38044	—	—	Extension - hikashop.com - SQLi in HikaShop component for Joomla <= 4.7.2	Aug 7, 2023 2y ago
CVE-2023-38045	—	—	Extension - admiror-design-studio.com - XSS in Admiror Gallery component for Joomla 5.0.0-5.2.0	Aug 7, 2023 2y ago
CVE-2023-34476	—	—	Extension - mooj.org - SQLi in Proforms Basic component for Joomla <= 1.6.0	Aug 7, 2023 2y ago
CVE-2023-34477	—	—	Extension - braincert.com - SQLi in Virtual Classroom component for Joomla <= 1.6.0	Aug 7, 2023 2y ago
CVE-2023-28733	high	7.2/10	Stored XSS affecting the AcyMailing plugin for Joomla	Mar 30, 2023 3y ago
CVE-2023-28732	medium	6.5/10	Missing access control affecting the AcyMailing plugin for Joomla	Mar 30, 2023 3y ago
CVE-2023-28731	critical	9.8/10	Unauthenticated RCE affecting the AcyMailing plugin for Joomla	Mar 30, 2023 3y ago
CVE-2016-15016	medium	5.5/10	mrtnmtth joomla_mod_einsatz_stats helper.php getStatsByType sql injection	Jan 8, 2023 3y ago
CVE-2022-23802	—	—	Extension - Insecure Permissions within Joomla Guru extensions	May 6, 2022 4y ago
CVE-2021-26028	—	—	[20210308] - Core - Path Traversal within joomla/archive zip class	Mar 4, 2021 5y ago