Feed live

Joomla vulnerabilities - every known CVE across core and extensions

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Joomla's component-and-module architecture means most disclosed CVEs originate in third-party extensions rather than core. Tracked, scored, and classified as they're published.

Total CVEs tracked

344,232

All time

Critical · Active

11,542

CVSS ≥ 9.0

New · 14 days

2,496

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 241–254 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-39974	—	—	Extension - acymailing.com - Exposure of Sensitive Information in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3	Aug 17, 2023 2y ago
CVE-2023-39972	—	—	Extension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3	Aug 17, 2023 2y ago
CVE-2023-39973	—	—	Extension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3	Aug 17, 2023 2y ago
CVE-2023-39970	—	—	Extension - acymailing.com - RCE in AcyMailing component for Joomla 6.7.0-8.5.0	Aug 17, 2023 2y ago
CVE-2023-38044	—	—	Extension - hikashop.com - SQLi in HikaShop component for Joomla <= 4.7.2	Aug 7, 2023 3y ago
CVE-2023-38045	—	—	Extension - admiror-design-studio.com - XSS in Admiror Gallery component for Joomla 5.0.0-5.2.0	Aug 7, 2023 3y ago
CVE-2023-34476	—	—	Extension - mooj.org - SQLi in Proforms Basic component for Joomla <= 1.6.0	Aug 7, 2023 3y ago
CVE-2023-34477	—	—	Extension - braincert.com - SQLi in Virtual Classroom component for Joomla <= 1.6.0	Aug 7, 2023 3y ago
CVE-2023-28733	high	7.2/10	Stored XSS affecting the AcyMailing plugin for Joomla	Mar 30, 2023 3y ago
CVE-2023-28732	medium	6.5/10	Missing access control affecting the AcyMailing plugin for Joomla	Mar 30, 2023 3y ago
CVE-2023-28731	critical	9.8/10	Unauthenticated RCE affecting the AcyMailing plugin for Joomla	Mar 30, 2023 3y ago
CVE-2016-15016	medium	5.5/10	mrtnmtth joomla_mod_einsatz_stats helper.php getStatsByType sql injection	Jan 8, 2023 3y ago
CVE-2022-23802	—	—	Extension - Insecure Permissions within Joomla Guru extensions	May 6, 2022 4y ago
CVE-2021-26028	—	—	[20210308] - Core - Path Traversal within joomla/archive zip class	Mar 4, 2021 5y ago