# OrdaSoft vulnerabilities Source: https://junglewise.ai/threats/vendors/ordasoft Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/ordasoft.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 14 vulnerabilities in OrdaSoft: 0 in the last 7 days and 14 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-102782, was published on 7 October 2026. Nothing in the last four weeks, down from 14 vulnerabilities in the four before. 1 technology has a page of its own. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 14 - All time: 14 (0 critical, 0 exploited in the wild) ## Latest OrdaSoft vulnerabilities - [CVE-2026-102782: OrdaSoft Simple Membership unauthenticated SQL injection](https://junglewise.ai/threats/cve-2026-102782-joomla-extension-ordasoft-com-unauthenticated-sql-injection-in) (info, published 7 Oct 2026) - [CVE-2026-102781: OrdaSoft Touch Slider unauthenticated destructive CRUD operations](https://junglewise.ai/threats/cve-2026-102781-joomla-extension-ordasoft-com-unauthenticated-destructive-crud) (info, published 7 Oct 2026) - [CVE-2026-102428: OrdaSoft Joomla CCK unauthenticated SQL injection](https://junglewise.ai/threats/cve-2026-102428-joomla-extension-ordasoft-com-unauthenticated-sql-injection-in) (info, published 5 Oct 2026) - [CVE-2026-102427: OrdaSoft Joomla CCK unauthenticated remote code execution in uploader](https://junglewise.ai/threats/cve-2026-102427-joomla-extension-ordasoft-com-unauthenticated-remote-code) (info, published 30 Sep 2026) - [CVE-2026-101111: OrdaSoft Book Library reflected cross-site scripting in book detail page](https://junglewise.ai/threats/cve-2026-101111-joomla-extension-ordasoft-com-reflected-cross-site-scripting-in) (info, published 28 Sep 2026) - [CVE-2026-101110: OrdaSoft Book Library SQL injection in ORDER BY clause](https://junglewise.ai/threats/cve-2026-101110-joomla-extension-ordasoft-com-unauthenticated-sql-injection-in) (info, published 28 Sep 2026) - [CVE-2026-101109: OrdaSoft Vehicle Manager reflected XSS in vehicle detail page](https://junglewise.ai/threats/cve-2026-101109-joomla-extension-ordasoft-com-reflected-cross-site-scripting-in) (info, published 28 Sep 2026) - [CVE-2026-101108: OrdaSoft Vehicle Manager unauthenticated SQL injection in ORDER BY](https://junglewise.ai/threats/cve-2026-101108-joomla-extension-ordasoft-com-unauthenticated-sql-injection-in) (info, published 28 Sep 2026) - [CVE-2026-100753: OrdaSoft Real Estate Manager reflected cross-site scripting](https://junglewise.ai/threats/cve-2026-100753-joomla-extension-ordasoft-com-reflected-cross-site-scripting-in) (info, published 28 Sep 2026) - [CVE-2026-100752: OrdaSoft Real Estate Manager SQL injection in order_field parameter](https://junglewise.ai/threats/cve-2026-100752-joomla-extension-ordasoft-com-unauthenticated-sql-injection-in) (info, published 28 Sep 2026) - [CVE-2026-88857: OrdaSoft Joomla Gallery arbitrary file upload and code execution](https://junglewise.ai/threats/cve-2026-88857-joomla-extension-ordasoft-com-authenticated-privileged-remote) (info, published 20 Sep 2026) - [CVE-2026-88856: OrdaSoft Joomla Gallery authenticated remote code execution](https://junglewise.ai/threats/cve-2026-88856-joomla-extension-ordasoft-com-authenticated-privileged-remote) (info, published 20 Sep 2026) - [CVE-2026-88855: OrdaSoft Joomla Gallery SQL injection](https://junglewise.ai/threats/cve-2026-88855-joomla-extension-ordasoft-com-authenticated-privileged-sql) (info, published 20 Sep 2026) - [CVE-2026-88854: OrdaSoft Joomla Gallery SQL injection in search module](https://junglewise.ai/threats/cve-2026-88854-joomla-extension-ordasoft-com-unauthenticated-sql-injection-in) (info, published 20 Sep 2026) ## Most severe OrdaSoft vulnerabilities - [CVE-2026-88856: OrdaSoft Joomla Gallery authenticated remote code execution](https://junglewise.ai/threats/cve-2026-88856-joomla-extension-ordasoft-com-authenticated-privileged-remote) (info, published 20 Sep 2026) - [CVE-2026-88857: OrdaSoft Joomla Gallery arbitrary file upload and code execution](https://junglewise.ai/threats/cve-2026-88857-joomla-extension-ordasoft-com-authenticated-privileged-remote) (info, published 20 Sep 2026) - [CVE-2026-88854: OrdaSoft Joomla Gallery SQL injection in search module](https://junglewise.ai/threats/cve-2026-88854-joomla-extension-ordasoft-com-unauthenticated-sql-injection-in) (info, published 20 Sep 2026) - [CVE-2026-88855: OrdaSoft Joomla Gallery SQL injection](https://junglewise.ai/threats/cve-2026-88855-joomla-extension-ordasoft-com-authenticated-privileged-sql) (info, published 20 Sep 2026) - [CVE-2026-102782: OrdaSoft Simple Membership unauthenticated SQL injection](https://junglewise.ai/threats/cve-2026-102782-joomla-extension-ordasoft-com-unauthenticated-sql-injection-in) (info, published 7 Oct 2026) - [CVE-2026-102781: OrdaSoft Touch Slider unauthenticated destructive CRUD operations](https://junglewise.ai/threats/cve-2026-102781-joomla-extension-ordasoft-com-unauthenticated-destructive-crud) (info, published 7 Oct 2026) - [CVE-2026-102428: OrdaSoft Joomla CCK unauthenticated SQL injection](https://junglewise.ai/threats/cve-2026-102428-joomla-extension-ordasoft-com-unauthenticated-sql-injection-in) (info, published 5 Oct 2026) - [CVE-2026-102427: OrdaSoft Joomla CCK unauthenticated remote code execution in uploader](https://junglewise.ai/threats/cve-2026-102427-joomla-extension-ordasoft-com-unauthenticated-remote-code) (info, published 30 Sep 2026) - [CVE-2026-101111: OrdaSoft Book Library reflected cross-site scripting in book detail page](https://junglewise.ai/threats/cve-2026-101111-joomla-extension-ordasoft-com-reflected-cross-site-scripting-in) (info, published 28 Sep 2026) - [CVE-2026-101110: OrdaSoft Book Library SQL injection in ORDER BY clause](https://junglewise.ai/threats/cve-2026-101110-joomla-extension-ordasoft-com-unauthenticated-sql-injection-in) (info, published 28 Sep 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 14 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 4 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 7 | 0 | 0 | | 5 Oct 2026 | 3 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## OrdaSoft technologies - [OrdaSoft Joomla Gallery](https://junglewise.ai/threats/technologies/joomla-gallery): 4 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "OrdaSoft vulnerabilities", https://junglewise.ai/threats/vendors/ordasoft, 9 November 2026.