All articles in the "Security" category. 47 articles.
No articles match your search. Try another word.
In 2016 a flaw in Joomla let strangers create accounts, even with registration turned off, and instantly with administrator privileges. Attacks began within tens of hours.
Read more →
The Joomla 3.7 release brought a new component and with it a critical SQL injection flaw accessible without logging in. It could steal administrators' login data.
Read more →
In 2023 a flaw in Joomla let anyone read the site's configuration without logging in, including the database login and password. All it took was to open one address.
Read more →
Weekly digest of the most important WordPress and Joomla vulnerabilities. This week we recorded 76 vulnerabilities; check whether any of them affects your website.
Read more →
One of the most famous flaws in Joomla's history let you take over a site without logging in, all it took was to craft the header your browser sends.
Read more →
Not every break-in is a sophisticated attack. Most often the attacker simply types in a password that leaked from a completely different service. It is called credential stuffing.
Read more →