Joomla! Project vulnerabilities

CVEs per yearBy the year they were published

1. 20207
2. 202124
3. 202213
4. 20236
5. 202415
6. 20259
7. 202666

Known exploitedNewest addition to KEV first

• CVE-2023-23752

  [20230201] - Core - Improper access check in webservice endpoints

  Joomla! Project · Joomla! CMS

  ExploitedMedium5.3

Newest CVEs

• CVE-2026-90915

  Joomla! Core - [20260905] - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

  Joomla! Project · Joomla! CMS

  High7.0
• CVE-2026-92226

  Joomla! Core - [20260913] - Core - Improper ACL checks for varous webservice edit tasks in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

  Joomla! Project · Joomla! CMS

  High7.0
• CVE-2026-92224

  Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

  Joomla! Project · Joomla! CMS

  Medium5.9
• CVE-2026-90907

  Joomla! Core - [20260902] - Core - Unauthorized user account creation via profile.save controller in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3

  Joomla! Project · Joomla! CMS

  Medium6.9
• CVE-2026-90914

  Joomla! Core - [20260904] - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

  Joomla! Project · Joomla! CMS

  Medium5.9
• CVE-2026-92231

  Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3

  Joomla! Project · Joomla! CMS

  High7.1
• CVE-2026-90918

  Joomla! Core - [20260908] - Core - XSS in HTML Mail Templates in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

  Joomla! Project · Joomla! CMS

  Medium6.9
• CVE-2026-92222

  Joomla! Core - [20260909] - Core - SSRF vectors in various core extensions in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

  Joomla! Project · Joomla! CMS

  High8.9
• CVE-2026-92223

  Joomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3

  Joomla! Project · Joomla! CMS

  Medium5.1
• CVE-2026-90917

  Joomla! Core - [20260907] - Core - Improper ACL checks in outputs for tagged items in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

  Joomla! Project · Joomla! CMS

  Medium6.9