Vendor

Joomla! Project

150 known vulnerabilities.

Products

Joomla! CMS 137 Joomla! 6 Joomla! Framework Filter package 4 Joomla! core 2 Joomla! Framework 1 joomla/filter 1 TinyBrowser Plugin 1 Tiny browser included with TinyMCE 3.0 1 joomla/input 1 Joomla! Framework Filesystem package 1 joomla/archive 1 joomla/filesystem 1

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 8.9

CVE-2026-73373 Public exploit

Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2

Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 - The default list of dangerous files did not include SHTML files. On servers that executed these files, that could lead to code execution.

Joomla! Project Joomla! CMS Joomla! Framework Filesystem package Web / CMS

Aug 18, 2026
High 8.6

CVE-2026-35223 Public exploit EPSS 13%

Joomla! Core - [20260508] - Improper access check in com_config webservice endpoints

An improper access check allows unauthorized access to com_config webservice endpoints.

Joomla! Project Joomla! CMS Web / CMS

May 26, 2026
High 7.5

CVE-2025-25227 Public exploit

[20250402] - Joomla Core - MFA Authentication Bypass

Insufficient state checks lead to a vector that allows to bypass 2FA checks.

Joomla! Project Joomla! CMS joomla/joomla-cms Web / CMS Packagist

Apr 8, 2025