Skip to content
OpenAdvisories

Vendor

jdownloads.com

7 known vulnerabilities.

Products

jDownloads extension for Joomla 6 JDownloads component for Joomla 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.2
    CVE-2026-117544

    Joomla Extension - jdownloads.com - IDOR allowing restricted file downloads in jDownloads < 4.1.8

    Joomla Extension - jdownloads.com - IDOR allowing restricted file downloads in jDownloads < 4.1.8 - The `other_file_id` parameter could reference another download’s file without fully enforcing the target download’s access restrictions. This allowed files to …

    jdownloads.com jDownloads extension for Joomla Web / CMS
  • High 7.1
    CVE-2026-117550

    Joomla Extension - jdownloads.com - Publishing of files without approval in jDownloads < 4.1.8

    Joomla Extension - jdownloads.com - Publishing of files without approval in jDownloads < 4.1.8 - Manipulated frontend submission parameters could bypass the intended publication and ownership rules. In particular, submissions could be published despite automa…

    jdownloads.com jDownloads extension for Joomla Web / CMS
  • High 8.9
    CVE-2026-117543

    Joomla Extension - jdownloads.com - SSRF via external download URL field jDownloads < 4.1.8

    Joomla Extension - jdownloads.com - SSRF via external download URL field jDownloads < 4.1.8 - HTTP redirects when retrieving external download URLs could bypass validation of the original destination. This allowed server-side requests to internal or otherwise…

    jdownloads.com jDownloads extension for Joomla Web / CMS