Widgetfactorylimited

Records4All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Widgetfactorylimited records in CISA KEV

TI-2026-36167 Widget Factory Joomla Content Editor Improper Access Control Vulnerability CRITICAL 100KEV 2026-06-16

Components

Products in the NVD configurations · select one to filter the records

Jce 3 records CRITICAL Com Jce 1 record LOW

Records

3 records in Jce · all components

TI-2026-36167 CVE-2026-48907 · GHSA-c3f5-4g7f-qjqj

Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

CRITICAL 100KEV

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.85439 Published 2026-06-05 No fix listed CWE-284

TI-2015-06103 CVE-2015-7339 · GHSA-gmf4-rxmx-v3cp

JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file…

MEDIUM 40

JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com_jce/editor/libraries/classes/browser.php script.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01127 Published 2020-03-09 No fix listed CWE-434

TI-2026-46932 CVE-2026-65891 · GHSA-chfv-whhw-v522

Improper input validation in joomlacontenteditor.net Joomla Content Editor extension for…

LOW 29

Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input validation in the file rename functionality…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00336 Published 2026-07-29 No fix listed CWE-20

Open these records in search →

Critical	1
High	1
Medium	2
Low	0
No CVSS	0