A well-designed Joomla publishing workflow gives a small editorial team a repeatable path from first draft to reviewed, approved, scheduled, and published content. Instead of allowing every contributor to publish, the team can separate writing, editorial review, approval, and publication...
The Joomla error Class "JPlugin" not found can take down part or all of a site when older extension code, an incomplete change, or a compatibility mismatch tries to load a class that is unavailable. This practical Joomla tutorial explains how to protect the site first, identify the extension or...
Joomla’s “File Checksum Failed” message means an update or file-integrity check found that a file does not match the expected data. It is not a documented CVE-based vulnerability, but it should be handled carefully: a failed check can result from an interrupted download or configuration problem, and it...
Joomla developer-impersonation scams rely on trust, urgency and requests for access rather than a newly disclosed Joomla software flaw. Learn how to verify unexpected contacts, control third-party access and respond quickly if credentials or site access may have been exposed.
Joomla sites running YOOtheme Pro 5.0.0 through 5.0.52 should update to version 5.0.53 or later without delay. CVE-2026-102785 is an unauthenticated remote code execution vulnerability in the extension’s public image transformation handler, with an official CVSS 4.0 score of 10.0 CRITICAL.
CVE-2026-102786 is a critical vulnerability in PHP, not Joomla core, but Joomla sites may be exposed when their server runs an affected PHP release. Administrators should identify the runtime version, arrange a server-level update where needed, and validate the site after the upgrade.
A hosting-side WAF change can sometimes prevent legitimate Joomla administrator requests from completing, leaving article, configuration or form saves unable to finish as expected. This is a configuration and compatibility troubleshooting issue, not a confirmed Joomla or cPanel vulnerability, and...
This Joomla tutorial explains a practical local-development workflow with ServerMaster for developers who prefer not to assemble a MAMP stack or container configuration for every project. It also sets clear boundaries: a local runtime is for trusted development work and is not a substitute for...
When every Joomla article appears to open the same page, the documented behavior points first to menu-item routing and, on sites using SP Page Builder, to the global article-details layout setting. The records here do not confirm a core Joomla defect on the affected site; they only show that a...
Joomla’s documented article removal process is a two-stage workflow: first, articles are sent to Trash, and then they can be permanently removed from Trash. This tutorial explains that bulk deletion path for a filtered set of articles in the Articles list, using the administrator interface and the...
A Joomla extension update that contains a security fix should be clearly distinguishable from a routine feature or maintenance release. Using the documented <security> update metadata mechanism can help site owners and their management processes recognise releases that deserve prompt attention, but it is only a...
Phoca Cart 6.1.9 addresses a paid-download insecure direct object reference (IDOR) issue that Joomla shop owners should remediate promptly, particularly where digital products are sold. The update is distinct from two earlier, CVE-tracked cross-site scripting flaws fixed in version 6.1.8, so...
A missing AcyMailing update site can prevent Joomla administrators from seeing an available security update. This operational issue matters because AcyMailing Enterprise versions 6.0.0 through 11.0.5 are affected by two unauthenticated vulnerabilities fixed in version 11.1.0 or later.
When a Joomla site may have been compromised, patching the software is necessary but does not by itself resolve the risk from credentials issued before the incident. This guide explains how to assess Joomla API token exposure, revoke and replace tokens safely, and respond to two verified Joomla...
