AcyMailing privilege escalation also affects Joomla sites
A privilege-escalation vulnerability identified as CVE-2026-3614 also affects Joomla installations of AcyMailing, despite public advisories describing the…
Security
Security releases, vulnerabilities and hardening for Joomla.
Malicious Smart Slider 3 Pro release affected Joomla sites
Nextend’s Smart Slider 3 Pro 3.5.1.35 was a malicious release distributed through the official update channel, giving affected Joomla sites a remote…
Joomla ACL issue affects com_ajax access checks
Joomla! CMS installations running 3.0.0-5.4.3 or 6.0.0-6.0.3 are affected by an access-control issue in com_ajax. Administrators should upgrade to 5.4.4 or…
Joomla fixes SQL injection in com_content webservice endpoint
Joomla administrators running 4.0.0-5.4.3 or 6.0.0-6.0.3 should upgrade to 5.4.4 or 6.0.4 to fix a Moderate SQLi vulnerability in the articles webservice…
Joomla article title XSS fixed in 5.4.4 and 6.0.4
Administrators running Joomla! CMS 4.0.0-5.4.3 or 6.0.0-6.0.3 should upgrade to 5.4.4 or 6.0.4 to address a Moderate-severity XSS issue.
Joomla fixes high-severity file deletion flaw in com_joomlaupdate
Joomla administrators running versions 4.0.0-5.4.3 or 6.0.0-6.0.3 should upgrade to 5.4.4 or 6.0.4 to fix a high-severity vulnerability in com_joomlaupdate.
Joomla webservice access flaw fixed in 5.4.4 and 6.0.4
Joomla! CMS versions 4.0.0-5.4.3 and 6.0.0-6.0.3 are affected by an Incorrect Access Control flaw in webservice endpoints. The Joomla project rates its…
Critical Novarain Framework flaw puts Joomla sites at risk
A critical vulnerability in the Tassos/Novarain Framework for Joomla allows unauthenticated attackers to include, read and delete files and carry out SQL…
Critical Astroid Framework flaw is under active exploitation
JoomDev's Astroid Framework for Joomla is affected by a critical authentication bypass that attackers are actively using to upload backdoors and inject SEO…
Tassos Framework security patch fixes Joomla AJAX flaw
Tassos has released security updates for six Joomla extensions after a vulnerability in its Tassos Framework system plugin could, under certain conditions…
Joomla 3 security plugin reaches version 1.0.9
A security plugin for sites still running the unsupported Joomla 3 series has reached version 1.0.9, addressing five reported vulnerabilities including…
JL Content Fields Filter 4.0.0 adds Joomla 6 support
JL Content Fields Filter 4.0.0 is a major release of the free Joomla extension, adding full Joomla 6 compatibility while addressing five SQL injection issues…