News - Security News
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
Six confirmed Joomla extension vulnerabilities affect the Free editions of OrdaSoft Real Estate Manager, Vehicle Manager and Book Library. Site owners should update the first two extensions immediately and treat Book Library versions through 6.4.6 as vulnerable while waiting for an explicitly identified fixed release.
Read more: Patch SQL Injection and XSS in Three OrdaSoft Joomla Extensions
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
Joomla administrators using Regular Labs Modules Anywhere or Tabs & Accordions should update to versions 10.0.0 and 3.2.0 respectively as a prudent security measure. However, two CVE identifiers initially associated with those releases are officially assigned to Event Gallery for Joomla, so administrators need to separate the update action from the unresolved CVE mapping.
Read more: Joomla Extension Security Update: Modules Anywhere and Tabs & Accordions
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
Administrators using the UP (Universal Plugin) for Joomla should urgently identify and update affected releases. Four verified vulnerabilities include unauthenticated arbitrary file access, SQL injection and remote code installation risks, with fixes available in UP 6.1.0 for Joomla 5.2–6.x and UP 5.2.1 for Joomla 3.10–5.1.
Read more: Update UP Plugin: Critical Joomla Vulnerabilities Fixed in 6.1.0
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
AcyMailing 11.1.0 adds security-related fixes for mailbox uploads and file fields, making a prompt update advisable for Joomla sites using the extension. The release also follows a confirmed Joomla SQL injection fixed in 10.11.1, so administrators should verify that their installation is now at least version 11.1.0.
Read more: AcyMailing 11.1.0 Security Fixes: Update Guidance for Joomla Sites
