RCE in Joomdonation.com Membership Pro Extension For Joomla
CVE-2026-62415
The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets.
Affected products
- Joomdonation.com Membership Pro Extension For Joomla — versions 1.0-4.6.1
Weakness classification (CWE)
References
- security@joomla.org (product)