Joomla 1.5.x < 5.4.9 / 6.0.x < 6.1.4 Multiple Vulnerabilities (joomla-6-1-4-5-4-9-security-bugfix-release)

Language:

Version 1.5 Oct 9, 2026, 2:01 PM CVE (set "CVE" coverage to "CVE-2026-90906,CVE-2026-90907,CVE-2026-90913,CVE-2026-90914,CVE-2026-90915,CVE-2026-90916,CVE-2026-90917,CVE-2026-90918,CVE-2026-92222,CVE-2026-92223,CVE-2026-92224,CVE-2026-92225,CVE-2026-92226,CVE-2026-92227,CVE-2026-92231,CVE-2026-92232") CVSS metrics ("CVSSv3 score" set to 8.3) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L") CVSSv2 score source (changed from "CVE-2026-92225" to "CVE-2026-92231") CVSSv3 score source (changed from "CVE-2026-92222" to "CVE-2026-90906") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610091401
Version 1.4 Oct 7, 2026, 3:19 PM CVSS metrics ("CVSSv2 score" set to 8.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:P") CVSS metrics ("CVSSv3 score" set to 8.0) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H") CVSSv2 score source (changed from "CVE-2026-92227" to "CVE-2026-92225") CVSSv3 score source (set to "CVE-2026-92222") Plugin Feed: 202610071519
Version 1.2 Oct 2, 2026, 11:09 PM Plugin metadata (Add IAVM Info) Plugin Feed: 202610022309
Version 1.1 Oct 2, 2026, 1:05 PM New Plugin Feed: 202610021305

* Changelogs are generally available for changes made after Nov 1, 2022