Joomlaworks vulnerabilities

Products

• K2 10

Newest

• getk2.com k2 extension for joomla, joomlaworks k2 +1 more Joomla Extension - getk2.org - Privileged RCE vulnerability in K2 extension for Joomla < 2.26 CVE-2026-48945 5.3 MediumJune 25, 2026
• getk2.com k2 extension for joomla, joomlaworks k2 +1 more Joomla Extension - getk2.org - Stored-XSS in K2 extension for Joomla < 2.26 CVE-2026-48940 3.4 LowJune 25, 2026
• getk2.com k2 extension for joomla, joomlaworks k2 +1 more Joomla Extension - getk2.org - Unauthenticated folder delete in K2 extension for Joomla < 2.26 CVE-2026-48941 6.5 MediumJune 25, 2026
• getk2.com k2 extension for joomla, joomlaworks k2 +1 more Joomla Extension - getk2.org - Privileged RCE vulnerability in K2 extension for Joomla < 2.26 CVE-2026-48946 6.3 MediumJune 25, 2026
• getk2.com k2 extension for joomla, joomlaworks k2 +1 more Joomla Extension - getk2.org - Exposure of sensitive files via attachment copy in K2 extension for Joomla < 2.26 CVE-2026-48944 6.5 MediumJune 25, 2026
• getk2.com k2 extension for joomla, joomlaworks k2 +1 more Joomla Extension - getk2.org - Stored-XSS in K2 extension for Joomla < 2.26 CVE-2026-48942 6.1 MediumJune 25, 2026
• getk2.com k2 extension for joomla, joomlaworks k2 +1 more Joomla Extension - getk2.org - Authenticated user property mass-assignment in K2 extension for Joomla < 2.26 CVE-2026-48943 6.5 MediumJune 25, 2026
• joomlaworks k2, verot project verot +1 more class.upload.php in verot.net omits .pht from the set of dangerous file extensions CVE-2019-19634 Public exploit 9.8 CriticalDecember 17, 2019
• joomlaworks k2, verot project verot +1 more Remote code execution in verot/class.upload.php CVE-2019-19576 Public exploitFix available EPSS 26.4% 9.8 CriticalDecember 4, 2019
• joomlaworks k2 ** DISPUTED ** The K2 component 2.8.0 for Joomla! has Incorrect Access Control with directory... CVE-2018-7482 Disputed 7.5 HighFebruary 28, 2018
• joomlaworks jw allvideos Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos ... CVE-2010-0696 Public exploit EPSS 28.2% 5.0 MediumFebruary 23, 2010
• joomlaworks com k2 SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla!... CVE-2009-2395 Public exploit 7.5 HighJuly 9, 2009