#joomla


CISA warns of actively exploited RCE flaws in Joomla extensions

Jul 13, 2026 // 18:56

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are exploiting vulnerabilities in the iCagenda and Balbooa Forms extensions for Joomla to […]

iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

Jul 13, 2026 // 12:54

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security flaws impacting iCagenda and Balbooa extensions for Joomla to its Known Exploited […]

CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV

Jul 8, 2026 // 08:39

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active […]

CISA orders feds to patch max severity Joomla plugin flaw by Friday

Jun 17, 2026 // 15:17

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch a maximum-severity flaw in the Widget Factory Joomla Content Editor (JCE) […]

CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

Jun 17, 2026 // 15:02

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting Widget Factory Joomla Content Editor (JCE) to its Known […]