Known Vulnerabilities for Joomla Cck by Ordasoft
Listed below are 2 of the newest known vulnerabilities associated with "Joomla Cck" by "Ordasoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-118494 json | Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9 - JReviews ... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-115452 json | Joomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.15, 3.0.0-3.1.8 and Smile Pack 1.1.2... | Not Provided | 2026-11-05 | 2026-11-06 |
| CVE-2026-115451 json | Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension 2.8.13-2.8.1... | Not Provided | 2026-11-05 | 2026-11-06 |
| CVE-2026-107903 json | Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0 | Not Provided | 2026-11-05 | 2026-11-06 |
| CVE-2026-107130 json | Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0 | Not Provided | 2026-11-05 | 2026-11-06 |
| CVE-2026-107129 json | Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0 | Not Provided | 2026-11-05 | 2026-11-06 |
| CVE-2026-105607 json | Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox < 2.2... | Not Provided | 2026-11-05 | 2026-11-06 |
| CVE-2026-105606 json | Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8 - An unauthenticated attac... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-105605 json | Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3 - A “... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-105604 json | Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Cla... | Not Provided | 2026-11-02 | 2026-11-02 |