← All credits
Phil Taylor, mysites.guru
106 vulnerability records and advisories credit this contributor.
CVE-2026-58149
Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0
CVE-2026-65877
Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1
CVE-2026-66489
Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2
CVE-2026-57831
Joomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2
CVE-2026-66488
Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2
CVE-2026-60025
Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0
CVE-2026-65889
Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2
CVE-2026-65879
Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1
CVE-2026-65766
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1
CVE-2026-65761
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1