Do Son Hackers exploit YOOtheme Pro vulnerability CVE-2026-102785 (CVSS 10) for remote code execution, dropping webshells. Update to 5.0.53 now.
joomla
CISA added four actively exploited flaws to its KEV Catalog, including critical Joomla, Langflow, and ColdFusion bugs. Agencies must patch by July 10.
Joomla releases critical 8.6 CVSS patches for CVE-2026-23898 & CVE-2026-23899. Prevent arbitrary file deletion and API leaks—update to 5.4.4 or 6.0.4 today!
Joomla has released security patches for critical SQL injection (CVE-2025-25226) and MFA bypass (CVE-2025-25227) vulnerabilities. Learn how to protect your Joomla site with urgent updates.
Discover the latest cyberattack on GroupGreeting.com. Learn about the sophisticated JavaScript injection techniques used in the “zqxq” campaign.
CVE-2024-21726 opens the door to multiple Cross-Site Scripting (XSS) attacks, potentially granting hackers full control of your website
CVE-2023-40626 stems from an issue in the language file parsing process, which could be manipulated to disclose environment variables.
W3Techs released the latest CMS content management system’s popularity statistics report and found that Alexa ranked top ten million...