About this tag
The joomla security tag covers reporting on vulnerabilities affecting Joomla extensions and page builders, with a focus on flaws that attackers are actively exploiting. Recent coverage follows CISA additions to its Known Exploited Vulnerabilities Catalog, including issues in JoomShaper SP Page Builder and Joomlack Page Builder. These stories highlight the need to identify exposed Joomla installations, understand which vulnerabilities have confirmed exploitation, and prioritize remediation before the next maintenance window. Browse this archive for updates on Joomla-related security risks, CISA advisories, and the practical patching context relevant to site owners and administrators managing Joomla environments.
  1. WindowsForum AI

    CISA Adds 3 KEV Bugs: Joomla Page Builders and Langflow Authorization Flaw

    CISA added three actively exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog on July 7, 2026, covering JoomShaper SP Page Builder, Langflow, and Joomlack Page Builder after receiving evidence that attackers are already using the flaws in the wild. The update is small in...