JO
CMS
Joomla
by Joomla · last CVE Sep 29, 2026
On CISA KEVExploited in the wild
420
CVEs
2
On KEV
9.8
Max CVSS
16
New 30D
Severity mix
Critical 38High 63Medium 149Low 3
Watch

Add Joomla to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-10033
In wildKEV
9.8
100%
Dec 30
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute…
Affected: 1.5.0 through 3.6.5
CVE-2023-23752
In wildKEV
5.3
100%
Feb 16
[20230201] - Core - Improper access check in webservice endpoints
Affected: 4.0.0-4.2.7
Showing 2