News - Security News
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
A Joomla 6.2 upgrade should be managed as a client-site change programme: confirm hosting readiness, map dependencies, test realistic workflows and retain a proven rollback path. This guide helps agencies, freelancers and site owners prepare safely without treating the release as a vulnerability advisory.
Read more: Preparing Client Sites for Joomla 6.2: Compatibility and Rollout Checklist
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
Phoca Cart 6.1.9 addresses a paid-download insecure direct object reference (IDOR) issue that Joomla shop owners should remediate promptly, particularly where digital products are sold. The update is distinct from two earlier, CVE-tracked cross-site scripting flaws fixed in version 6.1.8, so administrators need to understand which release resolves which issue.
Read more: Phoca Cart 6.1.9 Fixes Paid-Download IDOR: Steps for Joomla Owners
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
A missing AcyMailing update site can prevent Joomla administrators from seeing an available security update. This operational issue matters because AcyMailing Enterprise versions 6.0.0 through 11.0.5 are affected by two unauthenticated vulnerabilities fixed in version 11.1.0 or later.
Read more: AcyMailing Update Site Missing: How Joomla Rebuild Can Hide Security Updates
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
When a Joomla site may have been compromised, patching the software is necessary but does not by itself resolve the risk from credentials issued before the incident. This guide explains how to assess Joomla API token exposure, revoke and replace tokens safely, and respond to two verified Joomla webservice vulnerabilities without assuming that exploitation has been confirmed.
Read more: Revoking Joomla API Tokens After a Breach: A Practical Guide
