widgetfactorylimited vulnerabilities (CVE)

CVE records published for widgetfactorylimited, newest first. Follow to get an email when a new one appears.

2 results

6.5Medium

CVE-2026-65891 3 months ago

Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.9.99.10

joomlacontenteditor.net Joomla Content Editor (JCE) extension for Joomla

Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with fil…

10.0Critical

CVE-2026-48907 KEV 5 months ago

Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

joomlacontenteditor.net Joomla Content Editor (JCE) extension for Joomla

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.

85%EPSS