Skip to content
OpenAdvisories

Vendor

dj-extensions.com

11 known vulnerabilities.

dj-extensions.com at a glance

Last 12 months
6
Critical · all time
4
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 2 vulnerabilities, 2 critical August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 1 vulnerability November 2026: 3 vulnerabilities, 2 critical
Show as table
MonthVulnerabilitiesCritical
Nov 202632
Oct 202610
Sep 202600
Aug 202600
Jul 202622
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202510
Aug 202510
Jul 202520
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

DJ-Classifieds extension for Joomla 4 DJ-HelpfulArticles for Joomla 1 DJ-Flyer component for Joomla 1 DJ-Classifieds component for Joomla 1 DJ-HelpfulArticles extension for Joomla 1 PE Easy Slider 1 jDownloads extension for Joomla 1 DJ-Reviews component for Joomla 1
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Medium 5.3
    CVE-2026-105605

    Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3

    Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3 - A “duplicate my ad” convenience feature on the new-ad form (site/models/additem.php) loaded an existing advert by its raw numeric ID with n…

    dj-extensions.com DJ-Classifieds extension for Joomla Web / CMS
  • Critical 9.3
    CVE-2026-105604

    Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3

    Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated SQL injection vector in the frontend search.

    dj-extensions.com DJ-Classifieds extension for Joomla Web / CMS
  • Critical 9.4
    CVE-2026-105603

    Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3

    Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unprivileged file upload, leading to full RCE.

    dj-extensions.com DJ-Classifieds extension for Joomla Web / CMS
  • High 8.7
    CVE-2026-102800

    Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0

    Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0 - The “was this article helpful” voting widget posts a client-supplied ip field to its AJAX handlers (getDeny, getConfirm, getDenyReason in mod_djhelpful_articles/…

    dj-extensions.com DJ-HelpfulArticles extension for Joomla Web / CMS
  • Critical 10.0
    CVE-2026-61424 Public exploit

    Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2

    Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated file upload, leading to full RCE.

    dj-extensions.com DJ-Classifieds extension for Joomla Web / CMS
  • Critical 10.0
    CVE-2026-61900

    Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6

    Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6 - The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE.

    dj-extensions.com jDownloads extension for Joomla Web / CMS
  • Medium 5.9
    CVE-2025-60133

    WordPress PE Easy Slider Plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DJ-Extensions.com PE Easy Slider pe-easy-slider allows Stored XSS.This issue affects PE Easy Slider: from n/a through <= 1.1.0.

    dj-extensions.com PE Easy Slider
  • High 8.5
    CVE-2025-54474

    Extension - dj-extensions.com - SQLi vulnerability in DJ-Classifieds component 3.9.2-3.10.1 for Joomla

    A SQLi vulnerability in DJ-Classifieds component 3.9.2-3.10.1 for Joomla was discovered. The issue allows privileged users to execute arbitrary SQL commands.

    dj-extensions.com DJ-Classifieds component for Joomla Web / CMS
  • Medium 5.1
    CVE-2025-54295

    Extension - dj-extensions.com - Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla

    A Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla was discovered.

    dj-extensions.com DJ-Reviews component for Joomla Web / CMS
  • High 8.5
    CVE-2025-50127

    Extension - dj-extensions.com - SQLi vulnerability in DJ-Flyer component 1.0-3.2 for Joomla

    A SQLi vulnerability in DJ-Flyer component 1.0-3.2 for Joomla was discovered. The issue allows privileged users to execute arbitrary SQL commands.

    dj-extensions.com DJ-Flyer component for Joomla Web / CMS
  • Medium 6.1
    CVE-2024-27183

    Extension - dj-extensions.com - XSS vulnerability in DJ-HelpfulArticles component for Joomla 1.0.0-1.1.0

    XSS vulnerability in DJ-HelpfulArticles component for Joomla.

    dj-extensions.com DJ-HelpfulArticles for Joomla Web / CMS