VENDOR

Joomlack vulnerabilities: CVEs, exploitation and patches

Every Joomlack CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

CVE-2026-56290
Page Builder unauthenticated file upload leading to remote code execution Joomlack Page Builder · Sep 29, 2026
- CISA KEV
- EXPLOITED
- PoC PUBLIC
CRITICAL 9.8