VULNERABILITY INTELLIGENCE
CVE-2026-78074
EPSS probability0.54%
CISA KEVNot currently listed
Published2026-08-31
Last modified2026-09-08
Description
Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated actors to delete arbitrary installed extensions. Only the free versions of the miniOrange plugins are affected.
Weakness classification
- security@joomla.org: CWE-284