Joomla! vendor intelligence
Joomla! Known Exploited Vulnerabilities
Track evidence-backed exploitation affecting Joomla! products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.
- Total KEVs
- 8
- Known exploited vulnerabilities affecting Joomla! products
- In CISA KEV
- 3
- Records also listed in the official catalog
- Beyond CISA KEV
- 5
- Additional exploited vulnerabilities absent from CISA KEV
- Sensor Observed
- 1
- Joomla! KEV with sensor-observed exploitation activity
The catalog gap matters for Joomla! exposure
Five of the eight exploited Joomla! vulnerabilities tracked by Previdian are not in CISA KEV. Teams relying on the official catalog alone would miss 62% of this vendor portfolio.
- 38%
- Covered by CISA
- 62%
- Beyond CISA
- 6
- Product families
Attested Joomla! vulnerabilities
8 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.
How exploitation is verified| CVE / description | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2017-8917
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors. |
Joomla! | High | Beyond CISA | 11 Sep 2026 |
|
CVE-2026-56290
Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 |
JoomlaCK.fr Page Builder CK extension for Joomla | Confirmed | In CISA | 07 Jul 2026 |
|
CVE-2026-48907
Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5 |
Joomla Content Editor (JCE) extension for Joomla | Confirmed | In CISA | 16 Jun 2026 |
|
CVE-2018-6605
SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText,... |
Zh BaiduMap | Confirmed | Beyond CISA | 18 Apr 2026 |
|
CVE-2015-8562
Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the HTTP... |
Joomla! | High | Beyond CISA | 16 Dec 2015 |
|
CVE-2013-5576
administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before 3.1.5 allows remote... |
Joomla! | High | Beyond CISA | 09 Oct 2013 |
|
CVE-2011-5148
Multiple incomplete blacklist vulnerabilities in the Simple File Upload (mod_simplefileuploadv1.3) module before 1.3.5 for Joomla! allow remote... |
Simple File Upload | High | Beyond CISA | 31 Aug 2012 |
|
CVE-2023-23752
[20230201] - Core - Improper access check in webservice endpoints |
Joomla! CMS | Confirmed | In CISA | 08 Jan 2024 |
No Joomla! vulnerabilities match this search or filter.
Showing 8 of 8 on this page (8 Joomla! known exploited vulnerabilities).
Recurring weakness patterns
Input validation, access control, and neutralization account for six mapped occurrences across this Joomla! KEV portfolio.