Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.566 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 210 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Search results for: joomla

Displaying 1 - 25 results out of 316

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
OrdaSoft Simple Membership < 7.4.0 - SQL Injection CVE-2026-102782	Network Scanner	Oct 26, 2026	Critical(9.3)	0.01	0.6	No
SEBLOD for Joomla < 3.30.0/< 4.7.0/< 6.0.1 - Path Traversal CVE-2026-66914	Network Scanner	Oct 23, 2026	Critical(9.2)	0.02	0.75	No
Joomla SP Page Builder - Remote Code Execution CVE-2026-48908	Network Scanner	Sep 29, 2026	Critical(9.8)	0.89	1	Yes
Joomla Page Builder CK - Remote Code Execution CVE-2026-56290	Network Scanner	Sep 29, 2026	Critical(9.8)	0.31	0.99	Yes
Joomla Balbooa Forms - Remote Code Execution CVE-2026-56291	Network Scanner	Sep 22, 2026	Critical(9.8)	0.15	0.97	Yes
AcyMailing < 10.11.1 - Unauthenticated SQL Injection CVE-2026-56292	Network Scanner	Sep 8, 2026	High(7.5)	0.02	0.73	No
Joomla iCagenda - Remote Code Execution CVE-2026-48939	Network Scanner	Sep 7, 2026	Critical(9.8)	0.21	0.98	Yes
Joomla Easy Store - SQL Injection CVE-2026-65761	Network Scanner	Aug 27, 2026	Critical(9.8)	0.02	0.65	No
RSFiles! for Joomla - Arbitrary File Upload CVE-2026-57827	Network Scanner	Aug 18, 2026	Critical(9.8)	0.03	0.84	No
JoomShaper Helix3 <=3.1.0 - Unauthenticated Arbitrary JSON File Write CVE-2026-49049	Network Scanner	Aug 14, 2026	High(7.5)	0.01	0.63	No
Joomla iCagenda < 3.9.10 - Unauthenticated Arbitrary File Upload RCE CVE-2026-48939	Network Scanner	Aug 10, 2026	Critical(9.8)	0.21	0.98	No
Joomla SP LMS <= 4.1.3 - Remote Code Execution CVE-2026-48909	Network Scanner	Jul 23, 2026	Critical(9.5)	0.05	0.93	No
Joomla SP Page Builder <= 6.6.1 - Unauthenticated Arbitrary File Upload RCE CVE-2026-48908	Network Scanner	Jul 23, 2026	Critical(9.8)	0.89	1	No
Page Builder CK <= 3.5.10 - Unauthenticated Arbitrary File Upload CVE-2026-56290	Network Scanner	Jul 22, 2026	Critical(9.8)	0.31	0.99	No
Joomla JCE - Remote Code Execution CVE-2026-48907	Network Scanner	Jul 21, 2026	Critical(10)	0.86	1	Yes
Balbooa Forms < 2.4.1 - Unauthenticated Arbitrary File Upload CVE-2026-56291	Network Scanner	Jul 18, 2026	Critical(9.8)	0.15	0.97	No
Joomla! JCE extension < 2.9.99.5 unauthenticated RCE CVE-2026-48907	Network Scanner	Jun 14, 2026	Critical(10)	0.86	1	No
Joomla! XSS Vulnerability (20260102) CVE-2025-63083	Network Scanner	Jan 14, 2026	Medium(6.1)	0.01	0.12	No
Joomla! XSS Vulnerability (20260101) CVE-2025-63082	Network Scanner	Jan 14, 2026	Medium(6.1)	0.01	0.12	No
Joomla! - Full Path Disclosure	Network Scanner	Jan 7, 2026	Low	N/A	N/A	No
Joomla! User Enumeration Vulnerability (20250902) CVE-2025-54477	Network Scanner	Oct 8, 2025	Medium(5.3)	0.01	0.2	No
Joomla! XSS Vulnerability (20250901) CVE-2025-54476	Network Scanner	Oct 8, 2025	N/A	0.01	0.25	No
WordPress Sexy Contact Form (<= 0.9.7) - Arbitrary File Upload CVE-2014-8739	Network Scanner	Sep 16, 2025	Critical(9.8)	0.92	1	No
JoomlaUX JUX Real Estate 3.4.0 - Reflected XSS CVE-2025-2127	Network Scanner	May 14, 2025	Medium(4.3)	0.01	0.63	No
Joomla! Authentication Bypass Vulnerability (20250402) CVE-2025-25227	Network Scanner	Apr 25, 2025	High(7.5)	0.01	0.35	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove