SP Page Builder 6.9.1 addresses six Joomla extension vulnerabilities affecting Free and Pro installations, including an authenticated blind SQL injection, unauthenticated CAPTCHA bypasses in Pro form addons, and media and menu access-control flaws. Site owners running version 6.9.0 or earlier...
Two unauthenticated vulnerabilities in SP Property Finder affect versions 1.0.0 through 4.1.3: a Critical SQL injection issue and a mail relay–style form abuse issue. Joomla administrators should update to version 4.1.4 or later, then review database, administrator, and mail activity for signs of...
Choosing between Joomla Custom Fields and page builder fields is not simply a choice between a basic editor and a visual editor. The two approaches can represent very different content architectures. Joomla Custom Fields store structured values in Joomla's core content model. A builder may map...
Joomla custom fields turn repeated details—such as a review score, job title, document, video, department, or directory attribute—into separately managed values instead of leaving every editor to format them inside article text. Core fields can extend Articles, Contacts, and Users, while field...
Effective Joomla image SEO is not a single setting or a matter of adding keywords to every image. It is a repeatable publishing workflow: prepare an appropriately sized file, choose a useful filename, upload it to a stable location, insert it through the correct Joomla image workflow, describe its...
HTProtect is presented as a security-focused Joomla extension or service for organisations managing multiple Joomla sites. This independent overview considers where a central dashboard may improve operational visibility, what administrators should validate before deployment, and why it must...
A critical Joomla extension vulnerability, CVE-2026-77995, affects miniOrange OAuth Client versions 1.0.0 through 3.1.9. Administrators should update to version 3.2.0 or later without delay, or disable the extension until they can do so.
Effective Joomla image optimization is not a single switch in the administrator interface. It is a repeatable editorial workflow: decide where an image will appear, measure that space, crop and resize the source, choose an appropriate format, compress it to acceptable visual quality, name it...
Joomla cache settings can reduce repeated page-generation work, but choosing between Conservative Caching and Progressive Caching is not simply a matter of selecting the more aggressive option. The main difference concerns modules, not which component views are eligible for caching. Conservative...
Improving Joomla page speed safely is not a matter of enabling every cache option, installing several optimization extensions, or chasing a perfect test score. A reliable process starts with a restorable backup and a representative performance baseline. You then improve one area at a time—images,...
Joomla Bootstrap classes give site builders a practical way to create responsive columns, consistent spacing, and clearly styled calls to action without writing one-off CSS for every content block. This tutorial focuses on the bundled Cassiopeia frontend template in Joomla 6.1.3 and Joomla 5.4.8,...
Adding Joomla custom CSS correctly means placing your rules in the customization location provided by the active template, rather than changing Joomla core files or supplied template stylesheets. For a site using Cassiopeia, the documented starting point is a file named user.css. Direct changes to...
A critical Fabrik vulnerability, CVE-2026-66915, affects Joomla sites running Fabrik versions 1.0.0 through 4.6.8. Administrators should verify their installed version and update to Fabrik 4.6.9 or later as soon as possible.
Choosing safe Joomla extensions is not simply a matter of finding the highest rating or the newest release. Every third-party component, plugin, module, template, or package adds code that must be trusted, updated, tested, and eventually removed or replaced. For a business website, that makes...
Unused Joomla extensions are easy to forget, especially when they no longer display a visible page or module. However, an extension can still include plugins, API endpoints, administrator features, scheduled work, update connections, database tables, or directly reachable files. A structured...
