Jce vulnerabilities

1 known vulnerability in Jce from Widgetfactorylimited. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Widget Factory Joomla Content Editor Improper Access Control Exploited

  CVE-2026-48907Jun 5, 2026Joomlacontenteditor.netEPSS 85.4%

  A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.