joomlart.com vulnerabilities

Products

• S5 Register module for Joomla 1
• T4 Page Builder extension for Joomla 1

Latest joomlart.com CVEs

Newest publication first

1. CVE-2026-78374 Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension < 2.3.0

   Published 2026-09-10

   Medium·CVSS 6.9 EPSS 0.54%

   Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension < 2.3.0 - The front-end JSON editor endpoint exposes an action called contact that requires no authentication, no CSRF token, no captcha (when no captcha plugin is enabled) an...

2. CVE-2023-49707 Extension - joomlart.com - SQLi vulnerability in S5 Register module for Joomla 1.0.0-3.0.0

   Published 2023-12-14

   Critical·CVSS 9.8 EPSS 0.83%

   SQLi vulnerability in S5 Register module for Joomla.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.