Joomdonation.com vulnerabilities
We track 5 vulnerabilities in Joomdonation.com products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on July 22, 2026.
Latest Joomdonation.com vulnerabilities
- 7.5 High severity
Events Booking extension for Joomla: Improper Access Control
Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 - The Joomla extension Events Booking prior version 5.0-5.8.1 did not properly verify that an actor is allowed to download invoice information
- 9.1 Critical severity
Membership Pro extension for Joomla: Initialization of a Resource with an Insecure Default
Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2 - The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets.
- 8.8 High severity
Events Booking extension for Joomla: Cross-Site Request Forgery
Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection.
- 9.8 Critical severity
Events Booking extension for Joomla: Initialization of a Resource with an Insecure Default
Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets.
- 8.7 High severity
EDocman extension for Joomla: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - joomdonation.com - Unauthenticated blind SQL injection in EDocman < 3.9 - The Joomla extension EDocman is vulnerable to an unauthenticated SQL injection.