News - Security News
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
EasyStore for Joomla versions 1.0.0 through 3.0.0 are affected by seven documented security vulnerabilities, including an unauthenticated exposure of guest checkout shipping details. Store owners should update to EasyStore 3.0.1 or later, then review backend access, mail settings, and relevant logs.
Read more: Update EasyStore to 3.0.1: Seven Joomla Security Flaws Fixed
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
Four confirmed Joomla extension vulnerabilities affect OrdaSoft OS Gallery, including its free edition, in versions 1.0.0 through 6.2.6. Site owners should update to OS Gallery 6.2.7 or later, review component permissions, and check for signs of unusual database or file activity.
Read more: Update OS Gallery to 6.2.7: Four Joomla Security Vulnerabilities
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
SP Page Builder 6.9.1 addresses six Joomla extension vulnerabilities affecting Free and Pro installations, including an authenticated blind SQL injection, unauthenticated CAPTCHA bypasses in Pro form addons, and media and menu access-control flaws. Site owners running version 6.9.0 or earlier should plan an update promptly, while administrators of older branches should confirm that earlier security releases have also been applied.
Read more: Update SP Page Builder to 6.9.1 for Six Security Fixes
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
Two unauthenticated vulnerabilities in SP Property Finder affect versions 1.0.0 through 4.1.3: a Critical SQL injection issue and a mail relay–style form abuse issue. Joomla administrators should update to version 4.1.4 or later, then review database, administrator, and mail activity for signs of prior misuse.
Read more: Joomla Extension Vulnerabilities in SP Property Finder: Update to 4.1.4
