Joomla! Extensions Directory™

Download
Launch
  • Home
  • Vulnerable Extensions
  • Vulnerable Extensions

Vulnerable Extensions

This category lists vulnerable extensions for which no patch is known to  exists. You are recommended to uninstall any listed here from your site. Patched extensions are moved to the Resolved category.

Filters
List of articles in category Vulnerable Extensions
Title Published Date
SP Page Builder Pro 6.7.0, 6.7.0, Other 23 July 2026
EasyStore Pro 2.0.1, , Other 23 July 2026
DJ-Classifieds, , Other 17 July 2026
Gridbox , 2.2, Other 17 July 2026
EasyDiscuss by Stackideas,, , SQL Injection 27 February 2026
JEVents, 3.6.87, SQL Injection 23 April 2025
osTicky2, , Other 03 March 2024
EasyShop, 1.4.1, XSS (Cross Site Scripting) 19 October 2023
LivingWord, , XSS (Cross Site Scripting) 22 August 2023
Plugin Creative Gallery , , SQL Injection 22 August 2023
Proforms Basic via sort_order parameter, , SQL Injection 22 August 2023
EXTPLORER, 2.1.15, XSS (Cross Site Scripting) 22 August 2023
admirror gallery, , XSS (Cross Site Scripting) 22 August 2023
Proforms Basic Joomla Module, , Other 22 August 2023
acymailing, pre 8.7.0 , Other 18 August 2023
Admiror Gallery, , XSS (Cross Site Scripting) 25 July 2023
one vote, 1.7, XSS (Cross Site Scripting) 27 June 2023
JKassa, 2.0.0, SQL Injection 19 October 2022
YooRecipe, All, SQL Injection 30 March 2021
publisher, 3.0.19, XSS (Cross Site Scripting) 07 November 2020
paGO Commerce, 2.5.9.0, SQL Injection 27 October 2020
Social Chat, 1.5 and Below, SQL Injection Iacopo Guarneri 20 September 2020
hwdplayer,4.2,SQL Injection 09 April 2020
Rapicode, Multiple Extensions, Back Door 30 March 2018
Google Map Landkarten,4.2.3,SQL Injection 15 March 2018