The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity vulnerabilities affecting iCagenda and Balbooa Forms extensions for Joomla to…
A cybercrime crew left its server exposed for three weeks, revealing the inner workings of a mass site-hacking operation tracked as WP-SHELLSTORM.…
A Joomla editor with a maximum-severity vulnerability (CVE-2026-48907) added to CISA's exploited list. Fixed in version 2.9.99.5.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a maximum-severity vulnerability affecting the Widget Factory Joomla Content Editor (JCE) to…
Widget Factory is the developer of the Joomla Content Editor (JCE) extension, which was found to contain a critical improper access control…
Joomla is the provider of the Joomla content management system (CMS). It warned users about active exploitation of a critical flaw in…
The Joomla Content Editor (JCE) by Widget Factory is a popular extension for Joomla CMS. Versions 1.0.0 through 2.9.99.4 contain a critical…
⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More Ravie LakshmananJun 22, 2026Cybersecurity / Hacking It’s…
Widget Factory Joomla Content Editor Improper Access Control Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04…