agentprime: yootheme-com-zoo-extension-for-joomlaEvery new CVE for yootheme-com-zoo-extension-for-joomla.https://agentprime.io/CVE-2026-76612: Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1.66https://agentprime.io/advisories/CVE-2026-76612/https://agentprime.io/advisories/CVE-2026-76612/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 12:17:08 GMTCVECVE-2026-76611: Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo < 4.1.66https://agentprime.io/advisories/CVE-2026-76611/https://agentprime.io/advisories/CVE-2026-76611/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 12:15:01 GMTCVECVE-2026-77028: Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo < 4.1.66https://agentprime.io/advisories/CVE-2026-77028/https://agentprime.io/advisories/CVE-2026-77028/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 12:13:04 GMTCVECVE-2026-77029: Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66https://agentprime.io/advisories/CVE-2026-77029/https://agentprime.io/advisories/CVE-2026-77029/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 12:11:41 GMTCVECVE-2026-76610: Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.65https://agentprime.io/advisories/CVE-2026-76610/https://agentprime.io/advisories/CVE-2026-76610/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 08:54:46 GMTCVECVE-2026-74803: Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64https://agentprime.io/advisories/CVE-2026-74803/https://agentprime.io/advisories/CVE-2026-74803/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 13:39:24 GMTCVEcriticalCVE-2026-75114: Joomla Extension - yootheme.com - Open redirect in CommentController::twitterAuthenticate() in Zoo < 4.1.64https://agentprime.io/advisories/CVE-2026-75114/https://agentprime.io/advisories/CVE-2026-75114/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 13:39:03 GMTCVECVE-2026-74804: Joomla Extension - yootheme.com - Unauthenticated SQL injection in Zoo < 4.1.64https://agentprime.io/advisories/CVE-2026-74804/https://agentprime.io/advisories/CVE-2026-74804/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 13:35:50 GMTCVEcritical