What’s Vulnerable › Products

phoca.cz Phoca Cart extension for Joomla vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your phoca.cz Phoca Cart extension for Joomla version is affected

Latest phoca.cz Phoca Cart extension for Joomla vulnerabilities

• CVE-2026-102775 — Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8 (CVSS 7.5)
• CVE-2026-76565 — Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7 (CVSS 5.3)
• CVE-2026-76564 — Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7 (CVSS 8.6)
• CVE-2026-74251 — Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 (CVSS 9.3)