⌁ CyberSecurityBoardThreat Intel · CVEs · Products
Cyber Products

JCE Editor for Joomla

July 10, 2026

A Joomla editor with a maximum-severity vulnerability (CVE-2026-48907) added to CISA's exploited list. Fixed in version 2.9.99.5.

Discovered from: Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites