Joomla CMS
A popular content management system (CMS) whose extensions iCagenda and Balbooa Forms were exploited as zero-days.
Tag: Joomla
Joomla JCE Extension
A Joomla extension for content editing, targeted in a global CMS exploitation campaign for web shell deployment.
iCagenda and Balbooa Forms Joomla Flaws Exploited as Zero-Days; CISA Adds to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity vulnerabilities affecting iCagenda and Balbooa Forms extensions for Joomla to…
JoomliC
Developer of the iCagenda extension for Joomla that released patches for CVE-2026-48939 in versions 4.0.8 and 3.9.15.
iCagenda Joomla Extension
A Joomla extension for event calendar management, affected by CVE-2026-48939 allowing arbitrary file upload and remote code execution.
Balbooa Forms Joomla Extension
A Joomla extension for form building, affected by CVE-2026-56291 allowing unauthenticated remote code execution.
Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites
A cybercrime crew left its server exposed for three weeks, revealing the inner workings of a mass site-hacking operation tracked as WP-SHELLSTORM.…
WP-SHELLSTORM: Webshell Access Brokerage Operation
A cybercrime operation that breaks into websites at scale, plants webshell backdoors, and packages access for resale. Targeted WordPress and Joomla sites…
JCE Editor for Joomla
A Joomla editor with a maximum-severity vulnerability (CVE-2026-48907) added to CISA's exploited list. Fixed in version 2.9.99.5.
CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence…