Feed live

Joomla vulnerabilities - every known CVE across core and extensions

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Joomla's component-and-module architecture means most disclosed CVEs originate in third-party extensions rather than core. Tracked, scored, and classified as they're published.

Total CVEs tracked

344,232

All time

Critical · Active

11,542

CVSS ≥ 9.0

New · 14 days

2,497

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 211–240 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-22211	—	—	Extension - webdesigner-profi.de - SQL injection in JoomShopping component version 1.0.0 - 5.5.5 for Joomla	Feb 25, 2025 1y ago
CVE-2025-22210	—	—	Extension - hikashop.com - SQL injection in Hikashop component version 3.3.0 - 5.1.4 for Joomla	Feb 25, 2025 1y ago
CVE-2025-22208	—	—	Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.3 for Joomla	Feb 15, 2025 1y ago
CVE-2025-22209	—	—	Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.3 for Joomla	Feb 15, 2025 1y ago
CVE-2025-22206	—	—	Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.2 for Joomla	Feb 4, 2025 1y ago
CVE-2025-22205	—	—	Extension - admiror-design-studio.com - Path traversal in the Admiror Gallery 4.x component for Joomla	Feb 4, 2025 1y ago
CVE-2025-22204	—	—	Extension - regularlabs.com - Remote code execution vulnerability in the Sourcerer extensions < 12.0.0 for Joomla	Feb 4, 2025 1y ago
CVE-2024-40745	—	—	Extension - tassos.gr - Reflected Cross site scripting vulnerability in Convert Forms component for Joomla < 4.4.8	Dec 4, 2024 1y ago
CVE-2024-40744	—	—	Extension - tassos.gr - Unrestricted file upload in Convert Forms component for Joomla < 4.4.8	Dec 4, 2024 1y ago
CVE-2024-40746	—	—	Extension - hikashop.com - Stored cross site scripting vulnerability in Hikashop component for Joomla < 5.1.1	Oct 21, 2024 1y ago
CVE-2024-27183	—	—	Extension - dj-extensions.com - XSS vulnerability in DJ-HelpfulArticles component for Joomla 1.0.0-1.1.0	Jul 9, 2024 2y ago
CVE-2024-5737	medium	6.3/10	HTML Injection in AdmirorFrames Joomla! Extension	Jun 28, 2024 2y ago
CVE-2024-5736	high	8.2/10	SSRF in AdmirorFrames Joomla! Extension	Jun 28, 2024 2y ago
CVE-2024-5735	medium	6.3/10	Full Path Disclosure in AdmirorFrames Joomla! Extension	Jun 28, 2024 2y ago
CVE-2024-32788	medium	5.3/10	WordPress FG Joomla to Wordpress plugin <= 4.20.2 - Sensitive Data Exposure via Log File vulnerability	Apr 24, 2024 2y ago
CVE-2024-24837	medium	4.3/10	Cross-Site Request Forgery (CSRF) vulnerability in FG PrestaShop, FG Drupal and FG Joomla WordPress plugins	Feb 21, 2024 2y ago
CVE-2024-21728	—	—	Extension - smartcalc.es - Open redirect vulnerability in osTicky component for Joomla <= 2.2.8	Feb 15, 2024 2y ago
CVE-2024-21727	—	—	Extension - digtal-peak.com - XSS vulnerability in DP Calendar component for Joomla 8.0.0-8.0.14	Feb 15, 2024 2y ago
CVE-2023-40627	—	—	Extension - MLWebTechnologies - Reflected XSS in LivingWord component for Joomla 1.0.0-3.0.0	Dec 14, 2023 2y ago
CVE-2023-40659	—	—	Extension - joomboost.com - Reflected XSS in Easy Quick Contact module for Joomla 1.0.0-1.3.0	Dec 14, 2023 2y ago
CVE-2023-40658	—	—	Extension - deconf.net - Reflected XSS in Clicky Analytics Dashboard module for Joomla 1.0.0-1.3.1	Dec 14, 2023 2y ago
CVE-2023-40629	—	—	Extension - king-products.net - SQLi vulnerability in LMS Lite component for Joomla 1.0.0-3.3.0.1	Dec 14, 2023 2y ago
CVE-2023-40628	—	—	Extension - Extplorer.net - Reflected XSS in Extplorer component for Joomla 1.0.0-2.1.15	Dec 14, 2023 2y ago
CVE-2023-49708	—	—	Extension - joomstar.com - SQLi vulnerability in Starshop component for Joomla 1.0.0-1.0.9	Dec 14, 2023 2y ago
CVE-2023-49707	—	—	Extension - joomlart.com - SQLi vulnerability in S5 Register module for Joomla 1.0.0-3.0.0	Dec 14, 2023 2y ago
CVE-2023-40656	—	—	Extension - plasma-web.ru - Reflected XSS in Quickform component for Joomla 1.0.0-3.3.01	Dec 14, 2023 2y ago
CVE-2023-40657	—	—	Extension - artio.net - Reflected XSS in Joomdoc component for Joomla 1.0.0-4.0.5	Dec 14, 2023 2y ago
CVE-2023-40655	—	—	Extension - mooj.org - Reflected XSS in Proforms Basic component for Joomla <= 1.6.0	Dec 14, 2023 2y ago
CVE-2023-40630	—	—	Extension - joomcode.com - Unauthenticated LFI/SSRF in JCDashboards component for Joomla 1.0.0-1.1.30	Dec 14, 2023 2y ago
CVE-2023-39971	—	—	Extension - acymailing.com - XSS in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3	Aug 17, 2023 2y ago