# Joomla security incidents · pwn.watch

> Security incidents tagged Joomla (vendor, product, platform or attack type).

Page: https://pwn.watch/t/joomla · generated 2026-10-22T16:42:00.965Z

## Status (as of 2026-10-22)
- Incidents: 3 (0 live, 0 live and not fully patched, 3 patched)
- Days without a Joomla security incident: 107
- Newest incident started: 2026-07-07

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/joomla.json
- RSS (every update): https://pwn.watch/t/joomla/feed.xml
- This file: https://pwn.watch/t/joomla/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [Joomlack Page Builder: Joomlack Page Builder Improper Access Control Vulnerability](https://pwn.watch/i/joomlack-page-builder-cve-2026-56290) ([json](https://pwn.watch/i/joomlack-page-builder-cve-2026-56290.json)): high, closed, patched, started 2026-07-07, CVE-2026-56290
- [Widget Factory Joomla Content Editor : Widget Factory Joomla Content Editor Improper Access Control Vulnerability](https://pwn.watch/i/widget-factory-joomla-content-editor-cve-2026-48907) ([json](https://pwn.watch/i/widget-factory-joomla-content-editor-cve-2026-48907.json)): high, closed, patched, started 2026-06-16, CVE-2026-48907
- [Joomla! Improper Access Control](https://pwn.watch/i/joomla-cve-2023-23752) ([json](https://pwn.watch/i/joomla-cve-2023-23752.json)): medium, closed, patched, started 2024-01-08, CVE-2023-23752