Advisories · Technology
yootheme.com YOOtheme Pro extension for Joomla.
Every CVE that names yootheme.com YOOtheme Pro extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 10.0 CriticalCritical · CVSS 9+
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52
- yootheme.com YOOtheme Pro extension for Joomla
- Unrestricted file upload
- CVSS 5.1 Medium
Joomla Extension - yootheme.com - Authenticated, privileged information disclosure about site modules YOOtheme Pro 1.0.0-5.0.40
- yootheme.com YOOtheme Pro extension for Joomla
- Broken access control
- CVSS 7.5 High
Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41
- yootheme.com YOOtheme Pro extension for Joomla
- Cross-site scripting (XSS)
- CVSS 7.0 High
Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40
- yootheme.com YOOtheme Pro extension for Joomla
- Path traversal
- CVSS 8.6 High
Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40
- yootheme.com YOOtheme Pro extension for Joomla
- SQL injection