Joomla! Extensions Directory™

Download
Launch
  • Home
  • Vulnerable Extensions
  • Vulnerable Extensions

Vulnerable Extensions

This category lists vulnerable extensions for which no patch is known to  exists. You are recommended to uninstall any listed here from your site. Patched extensions are moved to the Resolved category.

Filters
List of articles in category Vulnerable Extensions
Title Published Date
WFLab Joomshopping carousel module,1.1.2 beta and below,SQLi 09 August 2015
Araticlhess Module [mod_araticlhess] / [mod_araticlhes], all versions, fake/backdoor 02 August 2015
MyBlog by Azrul, abandonware, SQLi & AFU 24 July 2015
SimpleImageUpload by Tuts4You, 1.2 and below, Other 26 June 2015
Contus HD Video Share (aka HDVideoShare) by Apptha [com_contushdvideoshare], 3.5 and below, Directory Traversal 25 June 2015
UMI 3D Tag Cloud [mod_umi3dtagcloud], 1.3.4 and below, XSS (Cross Site Scripting) 20 June 2015
Escope PrettyPhoto [mod_escope_pp], 1.0.3, XSS (Cross Site Scripting) - abandonware! 20 June 2015
XCloner Backup and Restore [com_cloner], 3.5.2 14 June 2015
"EQ Event Calendar" [com_eqfullevent] , 1.0.0 and below 10 June 2015
Football [com_football],SQL Injection 02 June 2015
Face Gallery by Apptha [com_facegallery] version 1.0 13 April 2015
Joomla Simple Photo Gallery version 1.1 12 April 2015
youtube plugin - youtubejoomla ,1.1 27 March 2015
AceShop, up to version 4.1.3, 12 November 2014
Joomla Mac Gallery 1.5 and below 22 September 2014
AceSEF , 4.1.2 and below 17 September 2014
EuropaCart, 8.0.1 and below , 17 September 2014
Codels codehighlighter 1.4 07 March 2014
plg_codehighlight, 1.0.1 , xss 07 March 2014
My Blog, 2.0.1 Build 286, 27 September 2013
Master Password, 01 June 2013
Memory Book 20 February 2013
JprojectMan 20 February 2013
econtentsite 20 February 2013
gigcalender 20 February 2013