Arbitrary file upload in Yootheme.com Yootheme Pro Extension For Joomla
CVE-2026-102785
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote attacker can reuse a signature disclosed in a legitimate public image URL, inject additional image operations, traverse out of the intended cache directory, and write an attacker-controlled PNG/PHP polyglot to an executable public media directory.
Vulnerability class: Unrestricted File Upload
Published · last modified .
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
- Yootheme.com Yootheme Pro Extension For Joomla — versions 5.0.0-5.0.52
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.yootheme.com/ (product)
Frequently asked questions
- What is CVE-2026-102785?
- CVE-2026-102785 is a vulnerability in Yootheme.com Yootheme Pro Extension For Joomla, classified under Unrestricted Upload of File with Dangerous Type. Published 2026-10-22.
- Is CVE-2026-102785 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.