{"schema_version":1,"title":"Joom Donation vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 6 vulnerabilities in Joom Donation: 0 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-63047, was published on 22 July 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/joom-donation","json_url":"https://junglewise.ai/threats/vendors/joom-donation.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/joom-donation","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":0,"all_time":6,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":6,"last_365_days":6},"latest":[{"cve":"CVE-2026-63047","cvss":0,"slug":"cve-2026-63047-joomdonation-events-booking-improper-access-control-in-invoice","title":"Joomdonation Events Booking improper access control in invoice downloads","severity":"info","exploited":false,"published_at":"2026-07-22T08:16:23.95+00:00","url":"https://junglewise.ai/threats/cve-2026-63047-joomdonation-events-booking-improper-access-control-in-invoice"},{"cve":"CVE-2026-62415","cvss":0,"slug":"cve-2026-62415-joomdonation-membership-pro-unauthenticated-media-upload","title":"JoomDonation Membership Pro unauthenticated media upload","severity":"info","exploited":false,"published_at":"2026-07-21T10:16:24.727+00:00","url":"https://junglewise.ai/threats/cve-2026-62415-joomdonation-membership-pro-unauthenticated-media-upload"},{"cve":"CVE-2026-60025","cvss":0,"slug":"cve-2026-60025-joomdonation-events-booking-csrf-in-frontend-file-upload","title":"JoomDonation Events Booking CSRF in frontend file upload","severity":"info","exploited":false,"published_at":"2026-07-17T16:17:16.23+00:00","url":"https://junglewise.ai/threats/cve-2026-60025-joomdonation-events-booking-csrf-in-frontend-file-upload"},{"cve":"CVE-2026-60024","cvss":5.3,"slug":"cve-2026-60024-joomdonation-events-booking-insecure-default-media-upload","title":"Joomdonation Events Booking insecure default media upload permissions","severity":"info","exploited":false,"published_at":"2026-07-17T16:17:16.113+00:00","url":"https://junglewise.ai/threats/cve-2026-60024-joomdonation-events-booking-insecure-default-media-upload"},{"cve":"CVE-2026-58149","cvss":0,"slug":"cve-2026-58149-joomdonation-events-booking-user-enumeration-in-joomla-extension","title":"JoomDonation Events Booking user enumeration in Joomla extension","severity":"info","exploited":false,"published_at":"2026-07-17T16:17:16.017+00:00","url":"https://junglewise.ai/threats/cve-2026-58149-joomdonation-events-booking-user-enumeration-in-joomla-extension"},{"cve":"CVE-2026-57832","cvss":8.7,"slug":"cve-2026-57832-joomdonation-edocman-sql-injection","title":"Joomdonation EDocman SQL injection","severity":"info","exploited":false,"published_at":"2026-07-15T09:16:33.45+00:00","url":"https://junglewise.ai/threats/cve-2026-57832-joomdonation-edocman-sql-injection"}],"vendor":{"hub":true,"name":"Joom Donation","slug":"joom-donation","homepage":"https://www.joomdonation.com/","description":"A provider of extensions for the Joomla content management system, specializing in donation and event management tools.","url":"https://junglewise.ai/threats/vendors/joom-donation"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-57832","cvss":8.7,"slug":"cve-2026-57832-joomdonation-edocman-sql-injection","title":"Joomdonation EDocman SQL injection","severity":"info","exploited":false,"published_at":"2026-07-15T09:16:33.45+00:00","url":"https://junglewise.ai/threats/cve-2026-57832-joomdonation-edocman-sql-injection"},{"cve":"CVE-2026-60024","cvss":5.3,"slug":"cve-2026-60024-joomdonation-events-booking-insecure-default-media-upload","title":"Joomdonation Events Booking insecure default media upload permissions","severity":"info","exploited":false,"published_at":"2026-07-17T16:17:16.113+00:00","url":"https://junglewise.ai/threats/cve-2026-60024-joomdonation-events-booking-insecure-default-media-upload"},{"cve":"CVE-2026-63047","cvss":0,"slug":"cve-2026-63047-joomdonation-events-booking-improper-access-control-in-invoice","title":"Joomdonation Events Booking improper access control in invoice downloads","severity":"info","exploited":false,"published_at":"2026-07-22T08:16:23.95+00:00","url":"https://junglewise.ai/threats/cve-2026-63047-joomdonation-events-booking-improper-access-control-in-invoice"},{"cve":"CVE-2026-62415","cvss":0,"slug":"cve-2026-62415-joomdonation-membership-pro-unauthenticated-media-upload","title":"JoomDonation Membership Pro unauthenticated media upload","severity":"info","exploited":false,"published_at":"2026-07-21T10:16:24.727+00:00","url":"https://junglewise.ai/threats/cve-2026-62415-joomdonation-membership-pro-unauthenticated-media-upload"},{"cve":"CVE-2026-60025","cvss":0,"slug":"cve-2026-60025-joomdonation-events-booking-csrf-in-frontend-file-upload","title":"JoomDonation Events Booking CSRF in frontend file upload","severity":"info","exploited":false,"published_at":"2026-07-17T16:17:16.23+00:00","url":"https://junglewise.ai/threats/cve-2026-60025-joomdonation-events-booking-csrf-in-frontend-file-upload"},{"cve":"CVE-2026-58149","cvss":0,"slug":"cve-2026-58149-joomdonation-events-booking-user-enumeration-in-joomla-extension","title":"JoomDonation Events Booking user enumeration in Joomla extension","severity":"info","exploited":false,"published_at":"2026-07-17T16:17:16.017+00:00","url":"https://junglewise.ai/threats/cve-2026-58149-joomdonation-events-booking-user-enumeration-in-joomla-extension"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Joom Donation Events-Booking","slug":"events-booking","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/events-booking"}]}