News - Security News
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
SP Page Builder 6.9.1 addresses six Joomla extension vulnerabilities affecting Free and Pro installations, including an authenticated blind SQL injection, unauthenticated CAPTCHA bypasses in Pro form addons, and media and menu access-control flaws. Site owners running version 6.9.0 or earlier should plan an update promptly, while administrators of older branches should confirm that earlier security releases have also been applied.
Read more: Update SP Page Builder to 6.9.1 for Six Security Fixes
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
Two unauthenticated vulnerabilities in SP Property Finder affect versions 1.0.0 through 4.1.3: a Critical SQL injection issue and a mail relay–style form abuse issue. Joomla administrators should update to version 4.1.4 or later, then review database, administrator, and mail activity for signs of prior misuse.
Read more: Joomla Extension Vulnerabilities in SP Property Finder: Update to 4.1.4
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
HTProtect is presented as a security-focused Joomla extension or service for organisations managing multiple Joomla sites. This independent overview considers where a central dashboard may improve operational visibility, what administrators should validate before deployment, and why it must complement—not replace—routine patching and established Joomla security controls.
Read more: HTProtect: An Independent Look at a Security-Focused Joomla Fleet Dashboard
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
A critical Joomla extension vulnerability, CVE-2026-77995, affects miniOrange OAuth Client versions 1.0.0 through 3.1.9. Administrators should update to version 3.2.0 or later without delay, or disable the extension until they can do so.
Read more: Critical miniOrange OAuth Client Flaw: Update to 3.2.0 or Disable
