What’s Vulnerable › Products

yootheme.com Zoo extension for Joomla vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your yootheme.com Zoo extension for Joomla version is affected

Latest yootheme.com Zoo extension for Joomla vulnerabilities

• CVE-2026-77028 — Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo < 4.1.66 (CVSS 5.3)
• CVE-2026-76612 — Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1.66 (CVSS 8.6)
• CVE-2026-76611 — Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo < 4.1.66 (CVSS 6.9)
• CVE-2026-77029 — Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66 (CVSS 4.6)
• CVE-2026-76610 — Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.65 (CVSS 6.9)
• CVE-2026-75114 — Joomla Extension - yootheme.com - Open redirect in CommentController::twitterAuthenticate() in Zoo < 4.1.64 (CVSS 5.1)
• CVE-2026-74804 — Joomla Extension - yootheme.com - Unauthenticated SQL injection in Zoo < 4.1.64 (CVSS 9.3)
• CVE-2026-74803 — Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64 (CVSS 10.0)