lomart.fr UP plugin for Joomla

4 known vulnerabilities in lomart.fr UP plugin for Joomla, 3 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-97163 CVSS 10.0 critical Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
  • CVE-2026-97162 CVSS 8.3 high Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
  • CVE-2026-97161 CVSS 9.2 critical Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
  • CVE-2026-97160 CVSS 9.4 critical Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29