Joomlack.fr vulnerabilities
We track 5 vulnerabilities in Joomlack.fr products across 2 products. 5 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on August 24, 2026.
Latest Joomlack.fr vulnerabilities
- 9.3 Critical severity
Page Builder CK extension for Joomla: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model.
- 9.3 Critical severity
Page Builder CK extension for Joomla: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend.
- 9.4 Critical severity
Page Builder CK extension for Joomla: Unrestricted Upload of File with Dangerous Type
Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE.
- 9.1 Critical severity
Page Builder CK extension for Joomla: Improper Access Control
Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla extension Page Builder CK does not properly apply access control to frontend page list views.
- 9.8 Critical severity
Joomlack Page Builder Improper Access Control Exploited
Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.