Advisories · Technology

OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla.

Every CVE that names OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-88857 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7
- OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla
- OrdaSoft.com OrdaSoft Joomla Gallery extension for Joomla
- Unrestricted file upload
Not analysed yet 20 Sept 2026
CVE-2026-88854 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7
- OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla
- OrdaSoft.com OrdaSoft Joomla Gallery extension for Joomla
- SQL injection
Not analysed yet 20 Sept 2026
CVE-2026-88855 CVE record

CVSS 8.6 High

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7
- OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla
- OrdaSoft.com OrdaSoft Joomla Gallery extension for Joomla
- SQL injection
Not analysed yet 20 Sept 2026
CVE-2026-88856 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7
- OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla
- OrdaSoft.com OrdaSoft Joomla Gallery extension for Joomla
- Code injection
Not analysed yet 20 Sept 2026