Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2026-57832

Joomla Extension - joomdonation.com - Unauthenticated blind SQL injection in EDocman < 3.9

Joomla Extension - joomdonation.com - Unauthenticated blind SQL injection in EDocman < 3.9 - The Joomla extension EDocman is vulnerable to an unauthenticated SQL injection.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Joomdonation.com
Products
Edocman Extension For Joomla
CVE-2026-60025

Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0

Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Joomdonation.com
Products
Events Booking Extension For Joomla
CVE-2026-58149

Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0

Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking is vulnerable to an unauthenticated user enumeration that allows to retrieve account usernames and email addresses.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Joomdonation.com
Products
Events Booking Extension For Joomla
CVE-2026-60024

Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0

Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Joomdonation.com
Products
Events Booking Extension For Joomla
CVE-2026-62415

Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2

Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2 - The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Joomdonation.com
Products
Membership Pro Extension For Joomla
CVE-2026-63047

Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1

Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 - The Joomla extension Events Booking prior version 5.0-5.8.1 did not properly verify that an actor is allowed to download invoice information.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Joomdonation.com
Products
Events Booking Extension For Joomla