Vulnerability Name CVE Severity
Joomla! JomSocial remote code execution
Joomla! remote code execution vulnerability CVE-2015-8562
Joomla! SQL injection vulnerability CVE-2015-7297 CVE-2015-7857 CVE-2015-7858
Joomla! v3.2.2 SQL injection
Joomla 1.5 end of life
Joomla Configuration Vulnerability (CVE-2008-3228) CVE-2008-3228
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-17858) CVE-2018-17858
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-18650) CVE-2019-18650
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-8419) CVE-2020-8419
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-8420) CVE-2020-8420
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-10241) CVE-2020-10241
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-13760) CVE-2020-13760
Joomla Cryptographic Issues Vulnerability (CVE-2014-7228) CVE-2014-7228
Joomla CVE-2006-4469 Vulnerability (CVE-2006-4469) CVE-2006-4469
Joomla CVE-2006-4470 Vulnerability (CVE-2006-4470) CVE-2006-4470
Joomla CVE-2006-4472 Vulnerability (CVE-2006-4472) CVE-2006-4472
Joomla CVE-2012-2747 Vulnerability (CVE-2012-2747) CVE-2012-2747
Joomla CVE-2018-15881 Vulnerability (CVE-2018-15881) CVE-2018-15881
Joomla CVE-2018-17856 Vulnerability (CVE-2018-17856) CVE-2018-17856
Joomla CVE-2019-14654 Vulnerability (CVE-2019-14654) CVE-2019-14654
Joomla CVE-2020-35610 Vulnerability (CVE-2020-35610) CVE-2020-35610
Joomla CVE-2021-23132 Vulnerability (CVE-2021-23132) CVE-2021-23132
Joomla CVE-2023-40626 Vulnerability (CVE-2023-40626) CVE-2023-40626
Joomla CVE-2025-25227 Vulnerability (CVE-2025-25227) CVE-2025-25227
Joomla CVE-2026-48896 Vulnerability (CVE-2026-48896) CVE-2026-48896
Joomla CVE-2026-48948 Vulnerability (CVE-2026-48948) CVE-2026-48948
Joomla CVE-2026-48957 Vulnerability (CVE-2026-48957) CVE-2026-48957
Joomla CVE-2026-48958 Vulnerability (CVE-2026-48958) CVE-2026-48958
Joomla Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-10238) CVE-2020-10238
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-1432) CVE-2010-1432
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4937) CVE-2011-4937
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-9933) CVE-2017-9933
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-35611) CVE-2020-35611
Joomla External Control of File Name or Path Vulnerability (CVE-2026-23898) CVE-2026-23898
Joomla Improper Access Control Vulnerability (CVE-2016-9838) CVE-2016-9838
Joomla Improper Access Control Vulnerability (CVE-2026-21629) CVE-2026-21629
Joomla Improper Access Control Vulnerability (CVE-2026-23899) CVE-2026-23899
Joomla Improper Authentication Vulnerability (CVE-2014-6632) CVE-2014-6632
Joomla Improper Authentication Vulnerability (CVE-2026-48897) CVE-2026-48897
Joomla Improper Certificate Validation Vulnerability (CVE-2017-11364) CVE-2017-11364
Joomla Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2021-26038) CVE-2021-26038
Joomla Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-5671) CVE-2008-5671
Joomla Improper Input Validation Vulnerability (CVE-2008-4105) CVE-2008-4105
Joomla Improper Input Validation Vulnerability (CVE-2015-8562) CVE-2015-8562
Joomla Improper Input Validation Vulnerability (CVE-2015-8564) CVE-2015-8564
Joomla Improper Input Validation Vulnerability (CVE-2015-8565) CVE-2015-8565
Joomla Improper Input Validation Vulnerability (CVE-2016-8870) CVE-2016-8870
Joomla Improper Input Validation Vulnerability (CVE-2018-12712) CVE-2018-12712
Joomla Improper Input Validation Vulnerability (CVE-2020-35616) CVE-2020-35616
Joomla Improper Input Validation Vulnerability (CVE-2021-23131) CVE-2021-23131
Joomla Improper Input Validation Vulnerability (CVE-2021-26036) CVE-2021-26036
Joomla Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-35612) CVE-2020-35612
Joomla Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-23793) CVE-2022-23793
Joomla Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-40384) CVE-2026-40384
Joomla Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-3227) CVE-2008-3227
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-40748) CVE-2024-40748
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2006-1049) CVE-2006-1049
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0795) CVE-2008-0795
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-1935) CVE-2008-1935
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-6852) CVE-2008-6852
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-1499) CVE-2009-1499
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-2679) CVE-2010-2679
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4166) CVE-2010-4166
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4696) CVE-2010-4696
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-1116) CVE-2012-1116
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-7981) CVE-2014-7981
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-4654) CVE-2015-4654
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-7297) CVE-2015-7297
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-7857) CVE-2015-7857
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-7858) CVE-2015-7858
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-8769) CVE-2015-8769
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-8045) CVE-2018-8045
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-21630) CVE-2026-21630
Joomla Improper Preservation of Permissions Vulnerability (CVE-2020-13763) CVE-2020-13763
Joomla Improper Privilege Management Vulnerability (CVE-2012-1563) CVE-2012-1563