Skip to content
Joomlaworks K2 vulnerabilities
-
getk2.com k2 extension for joomla, joomlaworks k2 +1 more
Joomla Extension - getk2.org - Privileged RCE vulnerability in K2 extension for Joomla < 2.26
CVE-2026-48945
5.3 Medium
-
getk2.com k2 extension for joomla, joomlaworks k2 +1 more
Joomla Extension - getk2.org - Stored-XSS in K2 extension for Joomla < 2.26
CVE-2026-48940
3.4 Low
-
getk2.com k2 extension for joomla, joomlaworks k2 +1 more
Joomla Extension - getk2.org - Unauthenticated folder delete in K2 extension for Joomla < 2.26
CVE-2026-48941
6.5 Medium
-
getk2.com k2 extension for joomla, joomlaworks k2 +1 more
Joomla Extension - getk2.org - Privileged RCE vulnerability in K2 extension for Joomla < 2.26
CVE-2026-48946
6.3 Medium
-
getk2.com k2 extension for joomla, joomlaworks k2 +1 more
Joomla Extension - getk2.org - Exposure of sensitive files via attachment copy in K2 extension for Joomla < 2.26
CVE-2026-48944
6.5 Medium
-
getk2.com k2 extension for joomla, joomlaworks k2 +1 more
Joomla Extension - getk2.org - Stored-XSS in K2 extension for Joomla < 2.26
CVE-2026-48942
6.1 Medium
-
getk2.com k2 extension for joomla, joomlaworks k2 +1 more
Joomla Extension - getk2.org - Authenticated user property mass-assignment in K2 extension for Joomla < 2.26
CVE-2026-48943
6.5 Medium
-
joomlaworks k2, verot project verot +1 more
class.upload.php in verot.net omits .pht from the set of dangerous file extensions
CVE-2019-19634
Public exploit
9.8 Critical
-
joomlaworks k2, verot project verot +1 more
Remote code execution in verot/class.upload.php
CVE-2019-19576
Public exploitFix available
EPSS 26.4%
9.8 Critical
-
joomlaworks k2
** DISPUTED ** The K2 component 2.8.0 for Joomla! has Incorrect Access Control with directory...
CVE-2018-7482
Disputed
7.5 High
-
joomlaworks com k2
SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla!...
CVE-2009-2395
Public exploit
7.5 High