News - Security News
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
A Joomla extension update that contains a security fix should be clearly distinguishable from a routine feature or maintenance release. Using the documented <security> update metadata mechanism can help site owners and their management processes recognise releases that deserve prompt attention, but it is only a classification signal—not a fix in itself.
Read more: How to Flag Joomla Extension Updates as Security Releases
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
A Joomla 6.2 upgrade should be managed as a client-site change programme: confirm hosting readiness, map dependencies, test realistic workflows and retain a proven rollback path. This guide helps agencies, freelancers and site owners prepare safely without treating the release as a vulnerability advisory.
Read more: Preparing Client Sites for Joomla 6.2: Compatibility and Rollout Checklist
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
Phoca Cart 6.1.9 addresses a paid-download insecure direct object reference (IDOR) issue that Joomla shop owners should remediate promptly, particularly where digital products are sold. The update is distinct from two earlier, CVE-tracked cross-site scripting flaws fixed in version 6.1.8, so administrators need to understand which release resolves which issue.
Read more: Phoca Cart 6.1.9 Fixes Paid-Download IDOR: Steps for Joomla Owners
- Details
- Written by: Bjørn Ove Bremnes
- Parent Category: News
- Category: News - Security News
A missing AcyMailing update site can prevent Joomla administrators from seeing an available security update. This operational issue matters because AcyMailing Enterprise versions 6.0.0 through 11.0.5 are affected by two unauthenticated vulnerabilities fixed in version 11.1.0 or later.
Read more: AcyMailing Update Site Missing: How Joomla Rebuild Can Hide Security Updates
