PT-2026-72116

Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration 2.0.0-4.0.11 - A backend operator granted access scoped to com icagenda only could enumerate Joomla user profiles...

EUVD-2010-5008

Malware in sbrugna...

EUVD-2025-6174

Malicious code in bioql PyPI...

PT-2025-17429 · Joomla · Virtuemart

Name of the Vulnerable Software and Affected Versions: VirtueMart component versions 1.0.0 through 4.4.7 for Joomla Description: A SQL injection in the VirtueMart component for Joomla allows authenticated attackers, specifically administrators, to execute arbitrary SQL commands in the product...

CVE-2025-22211

A SQL injection vulnerability in the JoomShopping component versions 1.0.0-1.4.3 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the country management area in backend...

CVE-2025-22210

A SQL injection vulnerability in the Hikashop component versions 3.3.0-5.1.4 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the category management area in backend...

CVE-2025-22210

A SQL injection vulnerability exists in the Hikashop component for Joomla versions 3.3.0 through 5.1.4 . This vulnerability allows authenticated attackers with administrator privileges to execute arbitrary SQL commands within the backend category management area . To mitigate this risk, it is rec...

Joomla core 4.0.0-4.4.6,5.0.0-5.1.2 - Unauthenticated Improper ACL for backend profile view vulnerability

Unauthenticated Improper ACL for backend profile view vulnerability discovered by ? in WordPress Core Joomla versions 4.0.0-4.4.6,5.0.0-5.1.2...