Advisories · Technology

joomdonation.com Events Booking extension for Joomla.

Every CVE that names joomdonation.com Events Booking extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-63047 CVE record

CVSS 7.5 High

Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1
- joomdonation.com Events Booking extension for Joomla
- Broken access control
Not analysed yet 22 Jul 2026
CVE-2026-60024 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0
- joomdonation.com Events Booking extension for Joomla
- CWE-1188
Not analysed yet 17 Jul 2026
CVE-2026-58149 CVE record

CVSS 5.3 Medium

Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0
- joomdonation.com Events Booking extension for Joomla
- Information disclosure
Not analysed yet 17 Jul 2026
CVE-2026-60025 CVE record

CVSS 8.8 High

Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0
- joomdonation.com Events Booking extension for Joomla
- Cross-site request forgery (CSRF)
Not analysed yet 17 Jul 2026