Jdownloads.com vulnerabilities
We track 5 vulnerabilities in Jdownloads.com products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2026.
Latest Jdownloads.com vulnerabilities
- 8.2 High severity
jDownloads extension for Joomla: Exposure of Sensitive Information to an Unauthorized Actor
Joomla Extension - jdownloads.com - IDOR allowing restricted file downloads in jDownloads < 4.1.8 - The `other_file_id` parameter could reference another download’s file without fully enforcing the target download’s access restrictions. This allowed files to b
- 10.0 Critical severity
jDownloads extension for Joomla: Unrestricted Upload of File with Dangerous Type
Joomla Extension - jdownloads.com - RCE through file upload in jDownloads < 4.1.8 - Insufficient validation of frontend thumbnail uploads allowed users with upload permission to place executable files on the server. This results in PHP code execution.
- 7.1 High severity
jDownloads extension for Joomla: Improper Access Control
Joomla Extension - jdownloads.com - Publishing of files without approval in jDownloads < 4.1.8 - Manipulated frontend submission parameters could bypass the intended publication and ownership rules. In particular, submissions could be published despite automat
- 8.9 High severity
jDownloads extension for Joomla: Server-Side Request Forgery
Joomla Extension - jdownloads.com - SSRF via external download URL field jDownloads < 4.1.8 - HTTP redirects when retrieving external download URLs could bypass validation of the original destination. This allowed server-side requests to internal or otherwise
- 10.0 Critical severity
jDownloads extension for Joomla: Unrestricted Upload of File with Dangerous Type
Joomla Extension - jdownloads.com - Unauthenticated arbitrary file upload in jDownloads < 4.1.6 - The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE.