Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-37252 | low | 3.1 | No | An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special:CheckUserLog shows usernames that have been hidden. | 2026-09-16 |
| CVE-2026-89172 | not reported | — | No | Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affect... | 2026-09-16 |
| CVE-2026-82191 | not reported | — | No | Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0... | 2026-09-16 |
| CVE-2026-82190 | not reported | — | No | Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Anyone who... | 2026-09-16 |
| CVE-2026-82189 | not reported | — | No | Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Unauthentic... | 2026-09-16 |
| CVE-2026-81568 | not reported | — | No | Joomla Extension - j2commerce.com - Arbitrary file read via `task=download` in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - `J2StoreMode... | 2026-09-16 |
| CVE-2026-81567 | not reported | — | No | Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the storefront product list in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22,... | 2026-09-16 |
| CVE-2026-78081 | not reported | — | No | Joomla Extension - j2commerce.com - Missing CSRF protection on cart, checkout and myprofile controllers in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22... | 2026-09-16 |
| CVE-2026-81566 | not reported | — | No | Joomla Extension - joomshaper.com - Missing Access Control in Menu Item Creation in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 - The add-t... | 2026-09-16 |
| CVE-2026-81565 | not reported | — | No | Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 - The fold... | 2026-09-16 |
| CVE-2026-81564 | not reported | — | No | Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Rename Allowing Arbitrary File Rename in SP Page Builder (Free an... | 2026-09-16 |
| CVE-2026-79700 | not reported | — | No | Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4... | 2026-09-16 |
| CVE-2026-78375 | not reported | — | No | Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in the Content Plugin of SP Page Builder (Free and Pro) 5.2.1 - 6... | 2026-09-16 |
| CVE-2026-88853 | not reported | — | No | Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla < 17.0.0 - Modals Pro... | 2026-09-16 |
| CVE-2026-88852 | not reported | — | No | Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla < 7.0.0, Snippets Pro extens... | 2026-09-16 |
| CVE-2026-85196 | not reported | — | No | Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20.0.0, Users Anywhere extension for Joomla <... | 2026-09-16 |
| CVE-2026-85195 | not reported | — | No | Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0 - Articles Any... | 2026-09-16 |
| CVE-2026-85192 | not reported | — | No | Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0 - C... | 2026-09-16 |
| CVE-2026-85191 | not reported | — | No | Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option in Tabs & Accordions extension for Joomla < 3.1.0 - Tabs &... | 2026-09-16 |
| CVE-2026-85190 | not reported | — | No | Joomla Extension - regularlabs.com - Privileged stored XSS via class option in Quick Index extension for Joomla < 5.0.5 - Quick Index insert... | 2026-09-16 |