Vendor
Balbooa.com
27 known vulnerabilities in products by Balbooa.com, 1 of them actively exploited (CISA KEV).
Key figures
27
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
15
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-56291 | Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 In CISA KEValso in 1 other product | 9.8 | |
| Critical | CVE-2026-102425 | Balbooa.com Balbooa Forms extension for Joomla: Code Injection | 10.0 | |
| Critical | CVE-2026-65880 | Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3 | — | |
| Critical | CVE-2026-67364 | Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2 | — | |
| Critical | CVE-2026-65888 | Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 | 9.8 | |
| Critical | CVE-2026-65887 | Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 | 9.8 | |
| Critical | CVE-2026-65884 | Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 | 9.8 | |
| Critical | CVE-2026-61425 | Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 | — | |
| Critical | CVE-2026-65890 | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 | 9.8 | |
| Critical | CVE-2026-102788 | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 | — | |
| Critical | CVE-2026-65886 | Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 | 7.5 | |
| Critical | CVE-2026-65885 | Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 | 8.8 | |
| Critical | CVE-2026-101127 | Balbooa.com Balbooa Forms extension for Joomla: Cross-site Scripting | 9.4 | |
| High | CVE-2026-102424 | Balbooa.com Balbooa Forms extension for Joomla: Path Traversal | 7.5 | |
| Critical | CVE-2026-102789 | Balbooa.com Gridbox extension for Joomla: Improper Access Control | — | |
| High | CVE-2026-67363 | Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2 | — | |
| Critical | CVE-2026-65889 | Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2 | 7.5 | |
| Medium | CVE-2026-102783 | Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 | — | |
| High | CVE-2026-102784 | Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 | — | |
| Medium | CVE-2026-101126 | Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4 | 6.5 | |
| Medium | CVE-2026-101112 | Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4 | 5.3 | |
| High | CVE-2025-49486 | Extension - balbooa.com - Stored XSS in Balbooa Gallery component version 1.0.0 - 2.4.0 for Joomla | — | |
| High | CVE-2026-65947 | Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2 | 7.3 | |
| High | CVE-2025-49485 | Balbooa.com Balbooa Forms component for Joomla: SQL Injection | — | |
| Medium | CVE-2026-66490 | Balbooa.com Gridbox extension for Joomla: Cross-site Scripting | 6.1 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 27sans-atrisk-mail,
Products
| Gridbox Extension For Joomla | 16 | 0 |
| Balbooa Forms Extension For Joomla | 7 | 0 |