[ Vendor · 10 CVEs ]
ordasoft.com
CVEs affecting ordasoft.com published in the last 30 days, plus any ordasoft.com CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102781 | 7 Oct 2026 | CVSS 6.9 | ordasoft.com Touch Slider extension for JoomlaJoomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6 - modOsTouchSliderHelper::getAjax(), wired… | |
| CVE-2026-102782 | 7 Oct 2026 | CVSS 9.3 | ordasoft.com OrdaSoft Simple Membership extension for JoomlaJoomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0 - site/simplemembership.php dispatches… | |
| CVE-2026-102428 | 5 Oct 2026 | CVSS 9.8 | ordasoft.com OrdaSoft Joomla CCKJoomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user provided and… | |
| CVE-2026-102427 | 30 Sep 2026 | CVSS 10.0 | ordasoft.com OrdaSoft Joomla CCKJoomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php is reached through the… | |
| CVE-2026-101109 | 28 Sep 2026 | CVSS 5.3 | ordasoft.com Vehicle Manager (Free) extension for JoomlaJoomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8 - The public vehicle-detail page (task=view)… | |
| CVE-2026-101110 | 28 Sep 2026 | CVSS 9.8 | ordasoft.com Book Library (Free) extension for JoomlaJoomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 - site/booklibrary.php’s books() function reads the… | |
| CVE-2026-101111 | 28 Sep 2026 | CVSS 6.1 | ordasoft.com Book Library (Free) extension for JoomlaJoomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6 - The public book-detail page template… | |
| CVE-2026-100752 | 28 Sep 2026 | CVSS 9.3 | ordasoft.com Real Estate Manager (Free) extension for JoomlaJoomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatemanager.php builds the ORDER… | |
| CVE-2026-100753 | 28 Sep 2026 | CVSS 5.3 | ordasoft.com Real Estate Manager (Free) extension for JoomlaJoomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9 - The public property-detail page’s “leave a… | |
| CVE-2026-101108 | 28 Sep 2026 | CVSS 9.3 | ordasoft.com Vehicle Manager (Free) extension for JoomlaJoomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 - site/vehiclemanager.php reads the order_field and… |