Skip to content
OpenAdvisories

Vendor

yootheme.com

13 known vulnerabilities.

Products

Zoo extension for Joomla 8 YOOtheme Pro extension for Joomla 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-102785 Public exploit

    Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52

    Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request sig…

    yootheme.com YOOtheme Pro extension for Joomla Web / CMS
  • Critical 10.0
    CVE-2026-74803

    Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64

    Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64 - The image element accepts arbitrary files when the client-supplied Content-Type falls within the image MIME group.

    yootheme.com Zoo extension for Joomla Web / CMS
  • Critical 9.3
    CVE-2026-74804

    Joomla Extension - yootheme.com - Unauthenticated SQL injection in Zoo < 4.1.64

    Joomla Extension - yootheme.com - Unauthenticated SQL injection in ItemController::element() in Zoo < 4.1.64 - The filter_type request value is interpolated into the query as a.type = "..." and the type_filter array as a.type IN ("..."), with no quoting or es…

    yootheme.com Zoo extension for Joomla Web / CMS