Skip to content
THREATWIRE

CVE Tracker · Vendor

Joomla! CVEs

7 CVEs in the tracker, 1 in the CISA KEV catalogue.

All vendors · RSS feed for Joomla! · Tracker data last updated 18 Oct 2026.

Showing 7 of 7

  1. CVE-2026-92227CVSS 7.5 highEPSS 0.27%2026-09-29

    joomla!. Joomla! Core - [20260914] - Core - MFA Authentication Bypass through rememberme cookies in Joomla 4.0.0-5.4.8…

  2. CVE-2026-92222CVSS 8.0 highEPSS 0.24%2026-09-29

    joomla!. Joomla! Core - [20260909] - Core - SSRF vectors in various core extensions in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3…

  3. CVE-2026-90906CVSS 8.3 highEPSS 0.22%2026-09-29

    joomla!. Joomla! Core - [20260901] - XSS in HTMLHelper::link method in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - Lack of escap…

  4. CVE-2023-23752CVSS 5.3 mediumEPSS 100%KEV2023-02-16

    Joomla!. Joomla! Improper Access Control Vulnerability

  5. CVE-2017-8917CVSS 9.8 criticalEPSS 100%2017-05-17

    joomla!. SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands…

  6. CVE-2015-8562No CVSSEPSS 98.3%2015-12-16

    joomla!. Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and e…

  7. CVE-2015-7297No CVSSEPSS 100%2015-10-29

    joomla!. SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL comm…