What’s Vulnerable › Products

yootheme.com YOOtheme Pro extension for Joomla vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your yootheme.com YOOtheme Pro extension for Joomla version is affected

Latest yootheme.com YOOtheme Pro extension for Joomla vulnerabilities

• CVE-2026-102785 — Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 (CVSS 10.0)
• CVE-2026-77997 — Joomla Extension - yootheme.com - Authenticated, privileged information disclosure about site modules YOOtheme Pro 1.0.0-5.0.40 (CVSS 5.1)
• CVE-2026-77996 — Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 (CVSS 7.5)
• CVE-2026-76613 — Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40 (CVSS 8.6)
• CVE-2026-75115 — Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40 (CVSS 7.0)