Joomla CVE index

All 182 CVE-numbered vulnerabilities mySites.guru tracks across 165 Joomla extensions, grouped by year.

2026

• CVE-2026-77998CriticalminiOrange SAML SSO
• CVE-2026-77995CriticalminiOrange OAuth Client
• CVE-2026-77992CriticalFabrik
• CVE-2026-77027CriticalFabrik
• CVE-2026-76609CriticalFabrik
• CVE-2026-76608CriticalFabrik
• CVE-2026-76607CriticalFabrik
• CVE-2026-76606CriticalFabrik
• CVE-2026-76605CriticalFabrik
• CVE-2026-76604CriticalFabrik
• CVE-2026-76603CriticalFabrik
• CVE-2026-76602CriticalFabrik
• CVE-2026-76601CriticalFabrik
• CVE-2026-76600CriticalFabrik
• CVE-2026-76599CriticalFabrik
• CVE-2026-76598CriticalFabrik
• CVE-2026-76597CriticalFabrik
• CVE-2026-76596CriticalFabrik
• CVE-2026-76571CriticalFabrik
• CVE-2026-75956CriticalJ-BusinessDirectory
• CVE-2026-75954CriticalJ-BusinessDirectory
• CVE-2026-75949CriticalJ-BusinessDirectory
• CVE-2026-75114CriticalZOO
• CVE-2026-74804CriticalZOO
• CVE-2026-74803CriticalZOO
• CVE-2026-74254CriticalPage Builder CK
• CVE-2026-74253CriticalSourcerer
• CVE-2026-74251CriticalPhoca Cart
• CVE-2026-67364CriticalBalbooa Forms
• CVE-2026-67363CriticalBalbooa Forms
• CVE-2026-65883CriticalAimy Captcha-Less Form Guard
• CVE-2026-65880CriticalBalbooa Forms
• CVE-2026-65877CriticalSP Page Builder
• CVE-2026-65876CriticalSP Page Builder
• CVE-2026-65766CriticalSP Page Builder
• CVE-2026-61900CriticaljDownloads
• CVE-2026-61425CriticalGridbox
• CVE-2026-61424CriticalDJ-Classifieds
• CVE-2026-60025CriticalEvents Booking
• CVE-2026-60024CriticalEvents Booking
• CVE-2026-58149CriticalEvents Booking
• CVE-2026-57832CriticalEDocman
• CVE-2026-57830CriticalHelix Ultimate Framework, Helix Ultimate
• CVE-2026-57829CriticalHelix Ultimate Framework, Helix Ultimate
• CVE-2026-57828CriticalPhoca Download
• CVE-2026-57827CriticalRSFiles!
• CVE-2026-56292CriticalAcyMailing
• CVE-2026-56291CriticalBalbooa Forms
• CVE-2026-49049CriticalHelix3 Template
• CVE-2026-49048CriticalJoomCCK
• CVE-2026-48940CriticalK2
• CVE-2026-48939CriticaliCagenda
• CVE-2026-48909CriticalSP LMS
• CVE-2026-48908CriticalSP Page Builder
• CVE-2026-48907CriticalJCE
• CVE-2026-34424CriticalSmart Slider 3 Pro
• CVE-2026-21628CriticalAstroid Framework
• CVE-2026-77997HighYOOtheme Pro
• CVE-2026-77996HighYOOtheme Pro
• CVE-2026-77994HighPage Builder CK
• CVE-2026-77993HighPage Builder CK
• CVE-2026-77029HighZOO
• CVE-2026-77028HighZOO
• CVE-2026-76613HighYOOtheme Pro
• CVE-2026-76612HighZOO
• CVE-2026-76611HighZOO
• CVE-2026-75115HighYOOtheme Pro
• CVE-2026-66917HighJoomGallery
• CVE-2026-65946HighRO CSVI
• CVE-2026-65944HighRO CSVI
• CVE-2026-65943HighRO CSVI
• CVE-2026-65882HighJoomdle
• CVE-2026-65881HighJoomdle
• CVE-2026-65765HighPhoca Commander
• CVE-2026-65764HighPhoca Commander
• CVE-2026-65761HighEasyStore
• CVE-2026-65760HighEasyStore
• CVE-2026-65759HighEasyStore
• CVE-2026-65758HighConvert Forms
• CVE-2026-64798HighRegular Labs IP Login
• CVE-2026-64797HighRegular Labs IP Login
• CVE-2026-64791HighRegular Labs Extension Manager
• CVE-2026-63685HighRegular Labs DB Replacer
• CVE-2026-63265HighRegular Labs Advanced Module Manager, Regular Labs Better Frontend Link, Regular Labs CDN, Regular Labs DB Replacer, Regular Labs Email Protector, Regular Labs IP Login, Regular Labs Quick Index, Regular Labs Extension Manager, Regular Labs Snippets, Regular Labs Tabs & Accordions
• CVE-2026-58148HighChronoForms 8
• CVE-2026-58078HighQuix Page Builder
• CVE-2026-58077High4Analytics
• CVE-2026-57833High4Analytics
• CVE-2026-57831HighDPCalendar
• CVE-2026-21626HighEasyDiscuss
• CVE-2026-21625HighEasyDiscuss
• CVE-2026-21624HighEasyDiscuss
• CVE-2026-21623HighEasyDiscuss
• CVE-2026-76610MediumZOO
• CVE-2026-65891MediumJCE
• CVE-2026-65763MediumPhoca Maps
• CVE-2026-65762MediumPhoca Guestbook
• CVE-2026-65754MediumRegular Labs ReReplacer
• CVE-2026-65712MediumRegular Labs CDN
• CVE-2026-64792MediumRegular Labs Conditional Content, Regular Labs Snippets, Regular Labs Tabs & Accordions
• CVE-2026-63684MediumRegular Labs Content Templater, Regular Labs ReReplacer, Regular Labs Snippets
• CVE-2026-63683MediumRegular Labs Advanced Module Manager, Regular Labs Conditional Content, Regular Labs Content Templater
• CVE-2026-63281MediumRegular Labs Advanced Module Manager, Regular Labs Conditional Content, Regular Labs Content Templater, Regular Labs ReReplacer
• CVE-2026-63280MediumRegular Labs Advanced Module Manager, Regular Labs Conditional Content, Regular Labs Content Templater, Regular Labs ReReplacer
• CVE-2026-63264MediumJoomShopping
• CVE-2026-62415MediumMembership Pro
• CVE-2026-62414MediumPage Builder CK
• CVE-2026-61901LowHikaShop

2025

• CVE-2025-50057CriticalRSFiles!
• CVE-2025-49485CriticalBalbooa Forms
• CVE-2025-49467CriticalJEvents
• CVE-2025-40636CriticalVisitors Counter
• CVE-2025-30085CriticalRSForm!Pro
• CVE-2025-26855CriticalArticles Calendar
• CVE-2025-22204CriticalSourcerer
• CVE-2025-54473HighPhoca Commander
• CVE-2025-55758MediumjDownloads
• CVE-2025-54297MediumCComment
• CVE-2025-50126MediumRSBlog!
• CVE-2025-49486MediumBalbooa Gallery

2024

• CVE-2024-11145CriticalEasy Folder Listing Pro
• CVE-2024-5737HighAdmiror Frames
• CVE-2024-5736HighAdmiror Frames
• CVE-2024-5735HighAdmiror Frames
• CVE-2024-27183MediumDJ-HelpfulArticles
• CVE-2024-21728MediumosTicky2
• CVE-2024-21727MediumDPCalendar

2023

• CVE-2023-49708CriticalStarshop
• CVE-2023-40629CriticalLMS Lite
• CVE-2023-34477CriticalBrainCert Virtual Classroom
• CVE-2023-49707HighS5 Register
• CVE-2023-23749HighLDAP Integration with Active Directory
• CVE-2023-54363MediumSolidres
• CVE-2023-54362MediumVirtueMart
• CVE-2023-54361MediumiProperty Real Estate
• CVE-2023-54360MediumJLex Review
• CVE-2023-54357MediumBooking - Book It
• CVE-2023-40659MediumEasy Quick Contact
• CVE-2023-40658MediumClicky Analytics Dashboard
• CVE-2023-40627MediumLivingWord
• CVE-2023-23757MediumBalbooa Gallery
• CVE-2023-23756MediumoneVote

2022

• CVE-2022-27909MediumjDownloads

2020

• CVE-2020-9364CriticalCreative Contact Form
• CVE-2020-37219HighFabrik
• CVE-2020-37218HighHDW Player
• CVE-2020-25751HighpaGO Commerce
• CVE-2020-13424MediumXCloner Backup

2019

• CVE-2019-25752CriticalJ-BusinessDirectory
• CVE-2019-25761HighJoomCRM
• CVE-2019-25760HighEasy Shop
• CVE-2019-25758HighvBizz
• CVE-2019-25757HighvWishlist
• CVE-2019-25756HighvAccount
• CVE-2019-25755HighvReview
• CVE-2019-25753HighVMap
• CVE-2019-25751HighJ-ClassifiedsManager
• CVE-2019-25750HighJ-MultipleHotelReservation
• CVE-2019-25748HighJHotelReservation
• CVE-2019-25762MediumJoomProject
• CVE-2019-25740MediumJS Jobs

2018

• CVE-2018-25354HighJomres
• CVE-2018-25327MediumJS Jobs

2017

• CVE-2017-20282HighjCart
• CVE-2017-20281HighExtra Search
• CVE-2017-20280HighMyPortfolio
• CVE-2017-20275HighPHP-Bridge
• CVE-2017-20274HighLMS King Professional
• CVE-2017-20273HighEvent Registration Pro Calendar
• CVE-2017-20272HighUltimate Property Listing
• CVE-2017-20271HighStreetGuessr Game
• CVE-2017-20270HighTwitch TV
• CVE-2017-20265HighFlip Wall
• CVE-2017-20256HighSurvey Force Deluxe

2015

• CVE-2015-7343HighjNews
• CVE-2015-7342HighjNews
• CVE-2015-7341HighjNews
• CVE-2015-7339HighJCE
• CVE-2015-7338HighAcyMailing

2014

• CVE-2014-8739CriticalCreative Contact Form

2013

• CVE-2013-3932HighJomres
• CVE-2013-3931HighJomres

Why no WordPress CVE or vulnerability data?

WordPress is covered by the service too: mySites.guru integrates Wordfence's vulnerability feed in full, mirroring the data published on Wordfence's vulnerability pages, and every connected WordPress site is checked against it on each audit. To research a WordPress plugin or theme yourself, search Wordfence's database directly.