Skip to content
~/pwn.watch

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

// tag

Joomla

Security incidents tagged Joomla. Newest first.

incidents
2
live
0
patched
2
rss json llms.txtall tags

## 2 Joomla incidents in the last year

through Oct 22, 2026
crit 4 · high 3 · med 2 · low 1 · upd ½lessmore
show 2 older incidents

July 2026 1

  • highJoomlack Page Builder: Joomlack Page Builder Improper Access Control Vulnerability

    › Joomlack Page Builder patched

    Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload. Added to CISA KEV on 2026-07-07.

    open incident →CVE-2026-56290

June 2026 1

  • highWidget Factory Joomla Content Editor : Widget Factory Joomla Content Editor Improper Access Control Vulnerability

    › Widget Factory Joomla Content Editor patched

    Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP code via the creation of new editor profiles for unauthenticated users. Added to CISA KEV on 2026-06-16.

    open incident →CVE-2026-48907

// sponsored

buy sponsor slot · $149/mo