pwn.watch: Joomla incident updates https://pwn.watch/t/joomla Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:42:01 GMT [high] Joomlack Page Builder: Joomlack Page Builder Improper Access Control Vulnerability: CISA added CVE-2026-56290 to the KEV catalog (due 2026-07-10). https://pwn.watch/i/joomlack-page-builder-cve-2026-56290 joomlack-page-builder-cve-2026-56290:2026-07-07:CISA added CVE-2026-56290 to the KEV catalog (due 2026-07-10). Tue, 07 Jul 2026 00:00:00 GMT high Status: closed, patched [high] Widget Factory Joomla Content Editor : Widget Factory Joomla Content Editor Improper Access Control Vulnerability: CISA added CVE-2026-48907 to the KEV catalog (due 2026-06-19). https://pwn.watch/i/widget-factory-joomla-content-editor-cve-2026-48907 widget-factory-joomla-content-editor-cve-2026-48907:2026-06-16:CISA added CVE-2026-48907 to the KEV catalog (due 2026-06-19). Tue, 16 Jun 2026 00:00:00 GMT high Status: closed, patched [medium] Joomla! Improper Access Control: CISA added CVE-2023-23752 to the KEV catalog (federal deadline 2024-01-29) https://pwn.watch/i/joomla-cve-2023-23752 joomla-cve-2023-23752:2024-01-08:CISA added CVE-2023-23752 to the KEV catalog (federal deadline 2024-01-29) Mon, 08 Jan 2024 00:00:00 GMT medium Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched