Vendor
Joomlack.fr
6 known vulnerabilities in products by Joomlack.fr, 1 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-56290 | Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 In CISA KEV | 9.8 | |
| Critical | CVE-2026-77994 | Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 | — | |
| Critical | CVE-2026-74254 | Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 | — | |
| Critical | CVE-2026-63048 | Joomlack.fr Page Builder CK extension for Joomla: Unrestricted Upload of File with Dangerous Type | — | |
| Critical | CVE-2026-62414 | Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 | 9.1 | |
| Medium | CVE-2026-77993 | Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5 | — |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,
- KEV: ColdFusion, Langflow, and Joomlasans-newsbites-mail,
Products
| Page Builder Ck Extension For Joomla | 5 | 0 |