Joomla Joomla\! vulnerabilities
340 published vulnerabilities in Joomla Joomla\!, 2 of them exploited in the wild. The most were published in 2026 (64), and 64 so far in 2026.
Joomla Joomla\! vulnerabilities by year
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Joomla Joomla\! vulnerabilities
- CVE-2016-10033 PHPMailer Command Injection
- CVE-2023-23752 Joomla! Improper Access Control
- CVE-2026-48902 Joomla! Core - [20260518] - Transport encryption downgrade for password and username reset links
- CVE-2025-25226 [20250401] - Joomla Framework - SQL injection vulnerability in quoteNameStr method of Database package
- CVE-2022-23795 [20220303] - Core - User row are not bound to a authentication mechanism
- CVE-2022-23797 [20220305] - Core - Inadequate filtering on the selected Ids
- CVE-2022-23799 [20220307] - Core - Variable Tampering on JInput $_REQUEST data
- CVE-2010-1433 File upload in Joomla
- CVE-2010-1435 Missing authorization in Joomla
- CVE-2020-35613 [20201104] - Core - SQL injection in com_users list view
- CVE-2020-10243 SQL injection in n/a
- CVE-2019-19846 SQL injection in n/a
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.