Read the docs

Joomlack

Records1All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Joomlack records in CISA KEV
TI-2026-40655 Joomlack Page Builder Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-07-07

Components

Products in the NVD configurations · select one to filter the records
Page Builder Ck 1 record CRITICAL

Records

1 record in Page Builder Ck · all components

TI-2026-40655 CVE-2026-56290 · GHSA-gxrr-wfg5-xqqf

Unrestricted file upload in JoomlaCK.fr Page Builder CK extension for Joomla

Priority CRITICAL 100KEV

Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading exe…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.30866 Published 2026-06-29 No fix listed CWE-434
Open these records in search →