CVE-2026-115451

The Advanced Custom Fields (versions 2.8.13-2.8.15, 3.1.4-3.1.8) and Smile Pack (versions 1.2.7-1.2.9, 2.1.2-2.1.6) Joomla extensions are vulnerable to improper access control . This flaw allows unauthenticated users to delete images within Gallery folders , including those on published articles ...

CVE-2026-115451 Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension 2.8.13-2.8.15, 3.1.4-3.1.8 and Smile Pack 1.2.7-1.2.9, 2.1.2-2.1.6

Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension 2.8.13-2.8.15, 3.1.4-3.1.8 and Smile Pack 1.2.7-1.2.9, 2.1.2-2.1.6 - Anyone could delete images in the Gallery folders, including images on published articles and modules, without...