Lucene search
+L

18309 matches found

Cvelist
Cvelist
added yesterday16 views

CVE-2026-65761 Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions...

9.3CVSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added yesterday6 views

CVE-2026-65760

Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to retreive order and customer information of any order in the system...

9.2CVSS5.3AI score
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added yesterday6 views

CVE-2026-65760 Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1

Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to retreive order and customer information of any order in the system...

9.2CVSS5.3AI score
SaveExploits0References2
CVE
CVE
added yesterday12 views

CVE-2026-65760

The CVE-2026-65760 entry concerns the Joomla Easy Store extension by joomshaper.com (versions 1.0.0–2.0.1). The vulnerability is described as improper access checks that allow logged-in users to retrieve order and customer information for any order, indicating a cross-customer confidentiality lea...

9.2CVSS5.3AI score
SaveExploits0References2
Cvelist
Cvelist
added yesterday19 views

CVE-2026-65760 Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1

Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to retreive order and customer information of any order in the system...

9.2CVSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added yesterday4 views

CVE-2026-65758 Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2

Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions...

8.2CVSS5.2AI score
SaveExploits0References1
CVE
CVE
added yesterday6 views

CVE-2026-65758

CVE-2026-65758 affects the Joomla Convert Forms extension (versions 2.5.0–5.2.2). The root cause is that the front-end Submissions view does not enforce access control, allowing an unauthenticated visitor to list a form’s submissions, exposing sensitive data. The available connected sources clear...

8.2CVSS5.2AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday17 views

CVE-2026-65758 Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2

Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions...

8.2CVSS
SaveExploits0References1
CVE
CVE
added yesterday8 views

CVE-2026-65713

Affected software: Joomla extension Modals Pro by regularlabs.com (Modals gallery feature). Issue: insecure path handling enables enumeration of unintended directories through Modals gallery paths. Impact: potential exposure of directory listings in the context of the Modals Pro extension as desc...

5.2AI score0.00204EPSS
SaveExploits0References1
CVE
CVE
added yesterday9 views

CVE-2026-64873

The CVE-2026-64873 entry concerns the Joomla extension from Regular Labs, specifically Cache Cleaner Pro, with an SSRF vulnerability. According to the connected records, custom query URLs could cause the extension to access internal or reserved network services, indicating an internal network exp...

5.2AI score0.0018EPSS
SaveExploits0References1
CVE
CVE
added yesterday6 views

CVE-2026-64871

The CVE concerns the Joomla extension Cache Cleaner by Regular Labs. The issue is that administrator URL purges did not consistently require a valid CSRF token and the cache-management permission, indicating a mismatch between token validation and privilege checks. The Connected documents identif...

5.2AI score0.00128EPSS
SaveExploits0References1
CVE
CVE
added yesterday7 views

CVE-2026-65757

The Joomla extension Modules Anywhere from regularlabs.com is affected by CVE-2026-65757. The root cause is inconsistent CSRF token checks and privilege checks within the extension, allowing an editor popup to expose restricted module data to authenticated users who do not have the required modul...

5.3AI score0.00128EPSS
SaveExploits0References1
CVE
CVE
added yesterday7 views

CVE-2026-65755

Summary: CVE-2026-65755 affects the Joomla Extension from regularlabs.com (Articles Anywhere and Users Anywhere). The issue is in the date-sensitive query cache keys which did not retain a bounded time component, allowing cached results to stay active across future publication or expiry boundarie...

5.2AI score0.0019EPSS
SaveExploits0References1
CVE
CVE
added yesterday7 views

CVE-2026-65754

CVE-2026-65754 concerns the Joomla extension ReReplacer Pro by Regular Labs. The connected sources describe an insecure path handling weakness in the ReReplacer XML include paths, which could allow reading files outside the site directory. The vulnerability is tied to the ReReplacer Pro extension...

5.1AI score0.00204EPSS
SaveExploits0References1
CVE
CVE
added yesterday7 views

CVE-2026-64875

CVE-2026-64875 concerns a Joomla Extension by RegularLabs: the GeoIP feature uses trusted, spoofable forwarded client-IP headers for GeoIP lookups, enabling a possible bypass of GeoIP rules. The connected records state the root cause as spoofable headers affecting GeoIP lookups and an implied imp...

5.2AI score0.00191EPSS
SaveExploits0References1
CVE
CVE
added yesterday7 views

CVE-2026-64876

Technical details about CVE-2026-64876 are not provided in the supplied documents. The available materials only state inconsistent CSRF token and privilege checks in the GeoIP extension; monitor for updates if more information surfaces.

5.2AI score0.00128EPSS
SaveExploits0References1
CVE
CVE
added yesterday7 views

CVE-2026-64872

CVE-2026-64872 affects the Joomla extension Cache Cleaner Pro by regularlabs.com. The issue is a path traversal vulnerability where the extension’s custom purge and log paths could escape the site webroot directory, potentially exposing or manipulating files outside the intended web-accessible ar...

5.1AI score0.00204EPSS
SaveExploits0References1
CVE
CVE
added yesterday9 views

CVE-2026-65712

The CVE-2026-65712 entry concerns the Joomla Pro extension from Regular Labs. Vulnerability detail: CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata. This indicates a path handling flaw in the CDN integration that may allow ...

5AI score0.00204EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added yesterday4 views

CVE-2026-65756 Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension

Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript...

5.3AI score0.00208EPSS
SaveExploits0References1
CVE
CVE
added yesterday8 views

CVE-2026-65756

CVE-2026-65756 affects the Joomla extension Keyboard Shortcuts from regularlabs.com. The issue is an XSS vector where shortcut configuration accepts arbitrary inline JavaScript, allowing potential script execution in the context of the affected extension. Per the published metrics, the attack vec...

6.1CVSS5.3AI score0.00208EPSS
SaveExploits0References1
Rows per page
Query Builder