CVE-2026-57831: Joomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2

Severity: high (CVSS 8.7 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-15 · updated 2026-10-24
Weakness: CWE-89

Description

Joomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2 - The Joomla extension DP Calendar is vulnerable to an unauthenticated SQL injection.

Affected products

digital-peak.com DP Calendar extension for Joomla: 8.18.0-10.11.1

References

https://joomla.digital-peak.com/products/dpcalendar
https://mysites.guru/blog/dpcalendar-sql-injection-disclosure/

Get alerted when CVE-2026-57831 or the next vulnerability affects your stack