THREAT OPS › CVEs › CVE-2026-48907
CVE-2026-48907 — Widget Factory Joomla Content Editor Improper Access Control Vulnerability
Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP code via the creation of new editor profiles for unauthenticated users.
Vulnerability details
- Affected productsJoomla Content Editor
- KEV remediation due2026-06-19
Related reporting
- Attackers Actively Exploiting Critical Vulnerability in Super Forms Pluginwordfence
- Metasploit Wrap Up: Lot of summer shells and fit http profilesrapid7
- July 2026 CVE Landscaperecordedfuture
- [CISA KEV] CVE-2026-48907 — Widget Factory Joomla Content Editor : Widget Factory Joomla Content Editor Improper Access Control Vulnerabilitycisa_kev
- June 2026 CVE Landscaperecordedfuture