Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Vendor: dj-extensions.com Clear all filters
TI-2026-83931 CVE-2026-105605 · GHSA-pmm5-h3g5-rm6q

Access control flaw in DJ-Classifieds exposes other users' ads

Priority LOW 24

Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3 - A “duplicate my ad” convenience feature on the new-ad form (site/models/additem.php) loaded an exist…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00294 Published 2026-11-02 No fix listed CWE-639
TI-2026-83930 CVE-2026-105604 · GHSA-g3qw-rp5c-h7mm

Unauthenticated SQL injection in DJ-Classifieds Joomla extension

Priority MEDIUM 48

Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated SQL injection vector in the frontend search.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0035 Published 2026-11-02 No fix listed CWE-89
TI-2026-83929 CVE-2026-105603 · GHSA-5wqr-pww3-c423

Arbitrary file upload in Joomla extension DJ-Classifieds

Priority MEDIUM 42

Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unprivileged file upload, leading to full RCE.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00304 Published 2026-11-02 No fix listed CWE-434
TI-2026-81122 CVE-2026-102800 · GHSA-q7p6-hg4g-4wgq

Stored cross-site scripting in DJ-HelpfulArticles Joomla extension

Priority MEDIUM 46

Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0 - The “was this article helpful” voting widget posts a client-supplied ip field to its AJAX handlers (getDeny, getConfirm, g…

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00388 Published 2026-10-27 No fix listed CWE-79
TI-2026-44029 CVE-2026-61424 · GHSA-pvrv-pcwc-vq7w

Unrestricted file upload in dj-extensions.com DJ-Classifieds extension for Joomla

Priority MEDIUM 49

Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated file upload, leading to full RCE.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00445 Published 2026-07-20 No fix listed CWE-434
TI-2026-44289 CVE-2026-61900 · GHSA-65x2-cg74-8x2m

Unrestricted file upload in dj-extensions.com jDownloads extension for Joomla

Priority MEDIUM 49

Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6 - The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00445 Published 2026-07-20 No fix listed CWE-434
TI-2025-37499 CVE-2025-60133 · GHSA-6hjm-mp5m-c5rc

WordPress PE Easy Slider Plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DJ-Extensions.com PE Easy Slider pe-easy-slider allows Stored XSS.This issue affects PE Easy Slider: from n/a through…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00225 Published 2025-09-26 No fix listed CWE-79