JO
CMS
Joomla
On CISA KEVExploited in the wild
422
CVEs
2
On KEV
9.8
Max CVSS
16
New 30D
Severity mix
Critical 38High 63Medium 151Low 3
Watch
Add Joomla to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-1562 | 7.5 | Jan 15 | Joomla! core before 2.5.3 allows unauthorized password change Affected: before 2.5.3 |
| CVE-2019-10946 | 7.5 | Apr 10 | An issue was discovered in Joomla! before 3.9.5 Affected: 3.2.0 through 3.9.4 |
| CVE-2019-9713 | 7.5 | Mar 12 | An issue was discovered in Joomla! before 3.9.4 Affected: 3.8.0 before 3.9.4 |
| CVE-2018-15881 | 7.5 | Aug 29 | An issue was discovered in Joomla! before 3.8.12 Affected: before 3.8.12 |
| CVE-2018-11322 | 7.5 | May 22 | An issue was discovered in Joomla! Core before 3.8.8 Affected: before 3.8.8 |
| CVE-2017-9933 | 7.5 | Jul 17 | Improper cache invalidation in Joomla! CMS 1.7.3 through 3.7.2 leads to disclosure of form contents Affected: 1.7.3; 1.7.4; 1.7.5; 2.5.0; 2.5.1; 2.5.2; +34 more |
| CVE-2016-9838 | 7.5 | Dec 16 | An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5 Affected: through 3.6.4 |
| CVE-2016-9837 | 7.5 | Dec 16 | An issue was discovered in templates/beez3/html/com_content/article/default.php in Joomla! before 3.6.5 Affected: through 3.6.4 |
| CVE-2008-4122 | 7.5 | Dec 19 | Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its… Affected: 1.5.8 |
| CVE-2026-21629 | 7.3 | Apr 1 | Joomla! Core - [20260301] - ACL hardening in com_ajax Affected: 3.0.0-5.4.3; 6.0.0-6.0.3 |
| CVE-2015-8769 | 7.3 | Jan 12 | SQL injection vulnerability in Joomla! 3.x before 3.4.7 allows attackers to execute arbitrary SQL commands via unspecified vectors Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.1.0; +23 more |
| CVE-2026-23898 | 7.2 | Apr 1 | Joomla! Core - [20260305] - Arbitrary file deletion in com_joomlaupdate Affected: 4.0.0-5.4.3; 6.0.0-6.0.3 |
| CVE-2018-17856 | 7.2 | Oct 9 | An issue was discovered in Joomla! before 3.8.13 Affected: 2.5.4 before 3.8.13 |