Skip to content
OpenAdvisories

Vendor

yootheme.com

13 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-102785 Public exploit

    Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52

    Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request sig…