Home of inspirations for Joomla users, developers, designers, and website owners.
Joomla matters in a web developer’s life. With its clean structure, flexible architecture, and user-friendly administration interface, Joomla makes it possible to build and manage professional websites efficiently — even for users who are just starting their journey.
Thanks to the large open-source community and thousands of extensions available, Joomla continues to be one of the most powerful and scalable CMS platforms available today.
JoomlaForever was created to provide an easy, practical, and inspiring introduction to Joomla. Our goal is not to overwhelm you with technical theory, but instead guide you toward building, improving, and maintaining Joomla websites in a real-world environment.
Joomla!® — A powerful open-source CMS with advanced features and easy administration.
Learn the fundamentals of Joomla, its ecosystem, architecture, and best practices.
Step-by-step tutorials created by JoomlaForever and the Joomla community.
Discover useful techniques, workflows, and optimizations for Joomla websites.
Independent reviews of Joomla extensions, tools, hosting solutions, and services.
Join discussions, connect with other Joomla users, and share knowledge.
Access curated Joomla resources, official documentation, and recommended tools.
Whether you are building your first Joomla website or managing advanced production environments, JoomlaForever is here to guide and inspire you.
The Joomla error Class "JPlugin" not found can take down part or all of a site when older extension code, an incomplete change, or a compatibility mismatch tries to load a class that is unavailable. This practical Joomla tutorial explains how to protect the site first, identify the extension or...
Joomla’s “File Checksum Failed” message means an update or file-integrity check found that a file does not match the expected data. It is not a documented CVE-based vulnerability, but it should be handled carefully: a failed check can result from an interrupted download or configuration problem, and it...
Joomla developer-impersonation scams rely on trust, urgency and requests for access rather than a newly disclosed Joomla software flaw. Learn how to verify unexpected contacts, control third-party access and respond quickly if credentials or site access may have been exposed.
Joomla sites running YOOtheme Pro 5.0.0 through 5.0.52 should update to version 5.0.53 or later without delay. CVE-2026-102785 is an unauthenticated remote code execution vulnerability in the extension’s public image transformation handler, with an official CVSS 4.0 score of 10.0 CRITICAL.
CVE-2026-102786 is a critical vulnerability in PHP, not Joomla core, but Joomla sites may be exposed when their server runs an affected PHP release. Administrators should identify the runtime version, arrange a server-level update where needed, and validate the site after the upgrade.
A hosting-side WAF change can sometimes prevent legitimate Joomla administrator requests from completing, leaving article, configuration or form saves unable to finish as expected. This is a configuration and compatibility troubleshooting issue, not a confirmed Joomla or cPanel vulnerability, and...
This Joomla tutorial explains a practical local-development workflow with ServerMaster for developers who prefer not to assemble a MAMP stack or container configuration for every project. It also sets clear boundaries: a local runtime is for trusted development work and is not a substitute for...
When every Joomla article appears to open the same page, the documented behavior points first to menu-item routing and, on sites using SP Page Builder, to the global article-details layout setting. The records here do not confirm a core Joomla defect on the affected site; they only show that a...
Joomla’s documented article removal process is a two-stage workflow: first, articles are sent to Trash, and then they can be permanently removed from Trash. This tutorial explains that bulk deletion path for a filtered set of articles in the Articles list, using the administrator interface and the...
A Joomla extension update that contains a security fix should be clearly distinguishable from a routine feature or maintenance release. Using the documented <security> update metadata mechanism can help site owners and their management processes recognise releases that deserve prompt attention, but it is only a...
Phoca Cart 6.1.9 addresses a paid-download insecure direct object reference (IDOR) issue that Joomla shop owners should remediate promptly, particularly where digital products are sold. The update is distinct from two earlier, CVE-tracked cross-site scripting flaws fixed in version 6.1.8, so...
A missing AcyMailing update site can prevent Joomla administrators from seeing an available security update. This operational issue matters because AcyMailing Enterprise versions 6.0.0 through 11.0.5 are affected by two unauthenticated vulnerabilities fixed in version 11.1.0 or later.
When a Joomla site may have been compromised, patching the software is necessary but does not by itself resolve the risk from credentials issued before the incident. This guide explains how to assess Joomla API token exposure, revoke and replace tokens safely, and respond to two verified Joomla...
Six confirmed Joomla extension vulnerabilities affect the Free editions of OrdaSoft Real Estate Manager, Vehicle Manager and Book Library. Site owners should update the first two extensions immediately and treat Book Library versions through 6.4.6 as vulnerable while waiting for an explicitly...
