Vendorswidgetfactorylimitedjceall versions
Vulnerabilities

widgetfactorylimited Widget Factory Limited JCE

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-48907
Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5
Published 2026-06-05 · Analyzed
10.0KEV2 PoCEPSS 0.162
CVE-2015-7339
JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com_jce/editor/libraries/classes/browser.php script.
Published 2020-03-09 · Modified
8.8EPSS 0.011
CVE-2026-65891
Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.9.99.10
Published 2026-07-29 · Analyzed
6.5EPSS 0.003