Skip to content
OpenAdvisories

Vendor

Joomla! Project

140 known vulnerabilities.

Products

Joomla! CMS 137 Joomla! Framework Filter package 4 Joomla! Framework 1 joomla/filter 1 joomla/input 1 Joomla! Framework Filesystem package 1 joomla/archive 1 joomla/filesystem 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-90907 Public exploit

    Joomla! Core - [20260902] - Core - Unauthorized user account creation via profile.save controller in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3

    Joomla! Core - [20260902] - Core - Unauthorized user account creation via profile.save controller in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - The profile.save controller did not check the login state of a user, allowing the creation of guest-level users on sites wit…

    Joomla! Project Joomla! CMS Web / CMS
  • Medium 5.3
    CVE-2023-23752 Exploited Public exploit Scanner template EPSS 100%

    [20230201] - Core - Improper access check in webservice endpoints

    An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

    Joomla! Project Joomla! CMS Web / CMS
    KEV Jan 8, 2024