yootheme.com vulnerabilities

Newest CVEs

• CVE-2026-102785

  Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52

  yootheme.com · YOOtheme Pro extension for Joomla

  Critical10.0
• CVE-2026-77997

  Joomla Extension - yootheme.com - Authenticated, privileged information disclosure about site modules YOOtheme Pro 1.0.0-5.0.40

  yootheme.com · YOOtheme Pro extension for Joomla

  Medium5.1
• CVE-2026-77996

  Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41

  yootheme.com · YOOtheme Pro extension for Joomla

  High7.5
• CVE-2026-76612

  Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1.66

  yootheme.com · Zoo extension for Joomla

  High8.6
• CVE-2026-76611

  Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo < 4.1.66

  yootheme.com · Zoo extension for Joomla

  Medium6.9
• CVE-2026-75115

  Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40

  yootheme.com · YOOtheme Pro extension for Joomla

  High7.0
• CVE-2026-76613

  Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40

  yootheme.com · YOOtheme Pro extension for Joomla

  High8.6
• CVE-2026-77028

  Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo < 4.1.66

  yootheme.com · Zoo extension for Joomla

  Medium5.3
• CVE-2026-77029

  Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66

  yootheme.com · Zoo extension for Joomla

  Medium4.6
• CVE-2026-76610

  Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.65

  yootheme.com · Zoo extension for Joomla

  Medium6.9