Skip to content
OpenAdvisories

Vendor

joomlack.fr

6 known vulnerabilities.

Products

Page Builder CK extension for Joomla 5 JoomlaCK.fr Page Builder CK extension for Joomla 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-77994

    Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5

    Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model.

    joomlack.fr Page Builder CK extension for Joomla Web / CMS
  • Critical 9.3
    CVE-2026-74254

    Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5

    Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend.

    joomlack.fr Page Builder CK extension for Joomla Web / CMS
  • Critical 9.4
    CVE-2026-63048

    Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2

    Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE.

    joomlack.fr Page Builder CK extension for Joomla Web / CMS
  • Critical 9.1
    CVE-2026-62414

    Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2

    Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla extension Page Builder CK does not properly apply access control to frontend page list views.

    joomlack.fr Page Builder CK extension for Joomla Web / CMS
  • Critical 10.0
    CVE-2026-56290 Exploited Public exploit Scanner template EPSS 31%

    Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0

    Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

    joomlack.fr JoomlaCK.fr Page Builder CK extension for Joomla Web / CMS
    KEV Jul 7, 2026