Tassos.gr vulnerabilities

Products

• Advanced Custom Fields 8
• Convert Forms Component For Joomla 3
• Advanced Custom Fields Extension For Joomla 2
• Convert Forms 2
• Convert Forms Extension For Joomla 2
• Engagebox 2
• Google Structured Data 2
• Novarain/tassos Framework (plg System Nrframework) 2
• Smile Pack 2
• Smile Pack Extension For Joomla 2

Newest

• tassos.gr advanced custom fields extension for joomla, smile pack extension for joomla +1 more Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension 2.8.13-2.8.15, 3.1.4-3.1.8 and Smile Pack 1.2.7-1.2.9, 2.1.2-2.1.6 CVE-2026-115451 6.9 MediumNovember 5, 2026
• tassos.gr advanced custom fields extension for joomla, smile pack extension for joomla +1 more Joomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.15, 3.0.0-3.1.8 and Smile Pack 1.1.2-1.2.9, 2.0.0-2.1.6 CVE-2026-115452 7.5 HighNovember 5, 2026
• tassos.gr convert forms extension for joomla Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension 1.0.0-4.4.16, 5.0.0-5.2.5 CVE-2026-77026 6.9 MediumAugust 20, 2026
• tassos.gr convert forms extension for joomla Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 CVE-2026-65758 8.2 HighJuly 23, 2026
• tassos framework, advanced custom fields, convert forms +7 more +9 more Extension - tassos.gr - Arbitrary File Deletion in Novarain/Tassos Framework < 6.1.0 for Joomla CVE-2026-48906 9.3 CriticalMay 27, 2026
• tassos.gr advanced custom fields, convert forms, engagebox +3 more +5 more Extension - tassos.gr - SQL injection and Unauthenticated File Read in Novarain/Tassos Framework v4.10.14 – v6.0.37 for Joomla CVE-2026-21627 Public exploit 9.5 CriticalFebruary 20, 2026
• tassos.gr advanced custom fields An HTML injection vulnerability exists in WordPress plugin "Advanced Custom Fields" prior to 6.4... CVE-2025-54940 4.6 MediumAugust 8, 2025
• convert forms project forms, tassos.gr convert forms component for joomla, convertforms component for joomla +2 more Extension - tassos.gr - SQL injection in Convert Forms component version 1.0.0-1.0.0 - 4.4.9 for Joomla CVE-2025-22212 2.7 LowMarch 5, 2025
• convert forms project forms, tassos.gr convert forms component for joomla +1 more Extension - tassos.gr - Reflected Cross site scripting vulnerability in Convert Forms component for Joomla < 4.4.8 CVE-2024-40745 5.4 MediumDecember 4, 2024
• convert forms project forms, tassos.gr convert forms component for joomla, tassosgr convert forms +2 more Extension - tassos.gr - Unrestricted file upload in Convert Forms component for Joomla < 4.4.8 CVE-2024-40744 9.8 CriticalDecember 4, 2024
• tassos.gr advanced custom fields, unknown advanced custom fields pro +1 more Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier... CVE-2024-45429 6.1 MediumSeptember 4, 2024
• advancedcustomfields advanced custom fields, unknown advanced custom fields pro +1 more Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced... CVE-2023-40068 5.4 MediumAugust 21, 2023
• advancedcustomfields advanced custom fields, unknown advanced custom fields pro +1 more WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS) CVE-2023-30777 Public exploit EPSS 39.0% 7.1 HighMay 10, 2023
• advancedcustomfields advanced custom fields, todo advanced custom fields pro +1 more Advanced Custom Fields 5.0-5.12.2 - Unauthenticated File Upload CVE-2022-2594 8.8 HighAugust 22, 2022
• advancedcustomfields advanced custom fields Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and... CVE-2022-23183 6.5 MediumMarch 31, 2022