CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a maximum-severity vulnerability affecting the Widget Factory Joomla Content Editor (JCE) to…
Tag: Joomla Content Editor
Joomla Content Editor (JCE): Vulnerable Extension
The Joomla Content Editor (JCE) by Widget Factory is a popular extension for Joomla CMS. Versions 1.0.0 through 2.9.99.4 contain a critical…
CVE-2026-48907 — Widget Factory Joomla Content Editor Improper Access Control Vulnerability
Widget Factory Joomla Content Editor Improper Access Control Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04…