PT-2026-72116

Name of the Vulnerable Software and Affected Versions icagenda.com versions prior to 2.0.0 and 4.0.11 Description An Access Control List ACL bypass exists where a backend operator with access restricted to the com icagenda component can enumerate Joomla user profiles. ACL is a mechanism used to...

EUVD-2010-5008

Malware in sbrugna...

EUVD-2025-6174

Malicious code in bioql PyPI...

PT-2025-17429 · Joomla · Virtuemart

Name of the Vulnerable Software and Affected Versions: VirtueMart component versions 1.0.0 through 4.4.7 for Joomla Description: A SQL injection in the VirtueMart component for Joomla allows authenticated attackers, specifically administrators, to execute arbitrary SQL commands in the product...

CVE-2025-22211

A SQL injection vulnerability in the JoomShopping component versions 1.0.0-1.4.3 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the country management area in backend...

CVE-2025-22210

A SQL injection vulnerability in the Hikashop component versions 3.3.0-5.1.4 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the category management area in backend...

CVE-2025-22210

A SQL injection vulnerability exists in the Hikashop component for Joomla versions 3.3.0 through 5.1.4 . The flaw allows authenticated attackers with administrator privileges to execute arbitrary SQL commands within the category management area in the backend. Practical consequences include unaut...

Joomla core 4.0.0-4.4.6,5.0.0-5.1.2 - Unauthenticated Improper ACL for backend profile view vulnerability

Unauthenticated Improper ACL for backend profile view vulnerability discovered by ? in WordPress Core Joomla versions 4.0.0-4.4.6,5.0.0-5.1.2...