What’s Vulnerable › Products

Joomla! Project Joomla! CMS vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Joomla! Project Joomla! CMS version is affected

Latest Joomla! Project Joomla! CMS vulnerabilities

• CVE-2025-54477 — Joomla! Core - [20250902] User-Enumeration in passkey authentication method (CVSS 5.3)
• CVE-2025-54476 — Joomla! Core - [20250901] Inadequate content filtering within the checkAttribute filter code (CVSS 4.8)
• CVE-2025-22213 — [20250301] - Core - Malicious file uploads via Media Manager (CVSS 7.1)
• CVE-2025-22207 — [20250201] - Core - SQL injection vulnerability in Scheduled Tasks component (CVSS 6.7)