Yootheme.com Yootheme Pro Extension For Joomla
3 CVEs affecting Yootheme.com Yootheme Pro Extension For Joomla. Latest disclosed: 2026-08-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-77997 | | 2026-08-25 | Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with com… | |
CVE-2026-77996 | | 2026-08-25 | Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a X… | |
CVE-2026-76613 | | 2026-08-21 | Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40 - An SQL injection allowed any contributor-level user to… |