Composer joomla/joomla-cms has 8 known advisories in the phpwarden feed. Feed 2026.10.28.3, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2019-7743 | Joomla! Object Injection Vulnerability | critical | 9.8 | >=2.5.0 and <3.9.3 | 3.9.3 |
| CVE-2013-5583 | Joomla! Cross-site Scripting vulnerability | low | 0.0 | <3.1.6 | 3.1.6 |
| CVE-2011-2509 | Joomla! vulnerable to Cross-site Scripting | medium | 0.0 | <1.6.4 | 1.6.4 |
| CVE-2011-4332 | Joomla! vulnerable to Cross-site Scripting | low | 0.0 | <1.6.4 | 1.6.4 |
| CVE-2010-1649 | Joomla! vulnerable to Cross-site Scripting | medium | 0.0 | >=1.5 and <1.5.18 | 1.5.18 |
| CVE-2018-11326 | Joomla! XSS Vulnerability | medium | 4.8 | >=3.0.0 and <3.8.8 | 3.8.8 |
| CVE-2019-16725 | Joomla! XSS in Default Templates | medium | 6.1 | >=3.0.0 and <3.9.12 | 3.9.12 |
| CVE-2025-25227 | Joomla CMS Multi-Factor Authentication Bypass | high | 7.5 | >=5.0.0 and <5.2.6 or >=4.0.0 and <4.4.13 | 5.2.6, 4.4.13 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked