Joomla! 3
Support for Joomla! 3 ended on 17/08/2023. There are no more security updates for this branch.
Latest version: 3.10.12, released on 11/07/2023
End of support: 17/08/2023
38 known vulnerabilities open in 3.10.12
Vulnerabilities in Joomla! 3
210 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 03/11/2026.
- CVE-2026-48902, CVSS 3.1: 9.8: still open in 3.10.12
- CVE-2024-27185, CVSS 3.1: 9.1: still open in 3.10.12
- CVE-2026-73373, CVSS 4.0: 8.9: still open in 3.10.12
- CVE-2026-23899, CVSS 4.0: 8.6: still open in 3.10.12
- CVE-2026-23898, CVSS 4.0: 8.6: still open in 3.10.12
- CVE-2026-40383, CVSS 4.0: 7.5: still open in 3.10.12
- CVE-2024-40749, CVSS 3.1: 7.5: still open in 3.10.12
- CVE-2024-40748, CVSS 3.1: 7.5: still open in 3.10.12
- CVE-2023-40626, CVSS 3.1: 7.5: still open in 3.10.12
- CVE-2026-92232, CVSS 4.0: 7.1: still open in 3.10.12
- CVE-2026-92231, CVSS 4.0: 7.1: still open in 3.10.12
- CVE-2026-90907, CVSS 4.0: 6.9: still open in 3.10.12
- CVE-2026-48905, CVSS 4.0: 6.9: still open in 3.10.12
- CVE-2026-48903, CVSS 4.0: 6.9: still open in 3.10.12
- CVE-2026-35222, CVSS 4.0: 6.9: still open in 3.10.12
- CVE-2026-35221, CVSS 4.0: 6.9: still open in 3.10.12
- CVE-2026-30895, CVSS 4.0: 6.9: still open in 3.10.12
- CVE-2026-30894, CVSS 4.0: 6.9: still open in 3.10.12
- CVE-2026-25901, CVSS 4.0: 6.9: still open in 3.10.12
- CVE-2026-25900, CVSS 4.0: 6.9: still open in 3.10.12
- CVE-2026-21630, CVSS 4.0: 6.9: still open in 3.10.12
- CVE-2024-21726, CVSS 3.1: 6.5: still open in 3.10.12
- CVE-2026-48948, CVSS 4.0: 6.4: still open in 3.10.12
- CVE-2026-21629, CVSS 4.0: 6.3: still open in 3.10.12
- CVE-2024-21722, CVSS 3.1: 6.3: still open in 3.10.12
- CVE-2024-40743, CVSS 3.1: 6.1: still open in 3.10.12
- CVE-2024-27184, CVSS 3.1: 6.1: still open in 3.10.12
- CVE-2024-26279, CVSS 3.1: 6.1: still open in 3.10.12
- CVE-2024-26278, CVSS 3.1: 6.1: still open in 3.10.12
- CVE-2024-21731, CVSS 3.1: 6.1: still open in 3.10.12
- CVE-2024-21724, CVSS 3.1: 6.1: still open in 3.10.12
- CVE-2026-90906, CVSS 4.0: 5.9: still open in 3.10.12
- CVE-2026-48954, CVSS 4.0: 5.9: still open in 3.10.12
- CVE-2026-21632, CVSS 4.0: 5.9: still open in 3.10.12
- CVE-2026-21631, CVSS 4.0: 5.9: still open in 3.10.12
- CVE-2025-63083, CVSS 4.0: 5.9: still open in 3.10.12
- CVE-2026-71572, CVSS 4.0: 4.8: still open in 3.10.12
- CVE-2024-21723, CVSS 3.1: 4.3: still open in 3.10.12
- CVE-2016-10033, CVSS 3.1: 9.8, actively exploited: not affected in 3.10.12
- CVE-2025-25226, CVSS 3.1: 9.8: fixed in 3.4.0
- CVE-2022-23797, CVSS 3.1: 9.8: not affected in 3.10.12
- CVE-2022-23795, CVSS 3.1: 9.8: not affected in 3.10.12
- CVE-2020-35613, CVSS 3.1: 9.8: not affected in 3.10.12
- CVE-2020-10243, CVSS 3.1: 9.8: fixed in 3.9.16
- CVE-2019-7743, CVSS 3.0: 9.8: not affected in 3.10.12
- CVE-2019-19846, CVSS 3.1: 9.8: not affected in 3.10.12
- CVE-2019-12765, CVSS 3.1: 9.8: not affected in 3.10.12
- CVE-2019-11831, CVSS 3.1: 9.8: not affected in 3.10.12
- CVE-2019-10945, CVSS 3.0: 9.8: not affected in 3.10.12
- CVE-2018-6376, CVSS 3.0: 9.8: fixed in 3.8.4
- CVE-2018-15882, CVSS 3.0: 9.8: fixed in 3.8.12
- CVE-2018-11325, CVSS 3.0: 9.8: fixed in 3.8.8
- CVE-2017-8917, CVSS 3.0: 9.8: not affected in 3.10.12
- CVE-2017-16634, CVSS 3.0: 9.8: not affected in 3.10.12
- CVE-2017-14596, CVSS 3.0: 9.8: not affected in 3.10.12
- CVE-2016-9836, CVSS 3.0: 9.8: not affected in 3.10.12
- CVE-2016-9081, CVSS 3.0: 9.8: not affected in 3.10.12
- CVE-2016-8869, CVSS 3.0: 9.8: not affected in 3.10.12
- CVE-2016-10045, CVSS 3.1: 9.8: not affected in 3.10.12
- CVE-2021-23128, CVSS 3.1: 9.1: fixed in 3.9.25
- CVE-2021-23127, CVSS 3.1: 9.1: fixed in 3.9.25
- CVE-2020-8420, CVSS 3.1: 8.8: fixed in 3.9.15
- CVE-2020-8419, CVSS 3.1: 8.8: fixed in 3.9.15
- CVE-2020-13760, CVSS 3.1: 8.8: fixed in 3.9.19
- CVE-2020-10241, CVSS 3.1: 8.8: fixed in 3.9.16
- CVE-2020-10239, CVSS 3.1: 8.8: fixed in 3.9.16
- CVE-2019-18650, CVSS 3.1: 8.8: not affected in 3.10.12
- CVE-2019-14654, CVSS 3.0: 8.8: not affected in 3.10.12
- CVE-2018-8045, CVSS 3.0: 8.8: not affected in 3.10.12
- CVE-2018-17858, CVSS 3.0: 8.8: fixed in 3.8.13
- CVE-2018-17855, CVSS 3.0: 8.8: fixed in 3.8.13
- CVE-2018-12712, CVSS 3.0: 8.8: not affected in 3.10.12
- CVE-2018-11323, CVSS 3.0: 8.8: fixed in 3.8.8
- CVE-2017-11364, CVSS 3.0: 8.8: not affected in 3.10.12
- CVE-2016-8870, CVSS 3.0: 8.1: not affected in 3.10.12
- CVE-2022-23793, CVSS 3.1: 7.5: not affected in 3.10.12
- CVE-2021-26038, CVSS 3.1: 7.5: not affected in 3.10.12
- CVE-2021-26036, CVSS 3.1: 7.5: not affected in 3.10.12
- CVE-2021-23132, CVSS 3.1: 7.5: fixed in 3.9.25
- CVE-2021-23131, CVSS 3.1: 7.5: fixed in 3.9.25
- CVE-2020-35616, CVSS 3.1: 7.5: not affected in 3.10.12
- CVE-2020-35612, CVSS 3.1: 7.5: not affected in 3.10.12
- CVE-2020-35611, CVSS 3.1: 7.5: not affected in 3.10.12
- CVE-2020-35610, CVSS 3.1: 7.5: not affected in 3.10.12
- CVE-2020-13763, CVSS 3.1: 7.5: fixed in 3.9.19
- CVE-2020-10238, CVSS 3.1: 7.5: fixed in 3.9.16
- CVE-2019-9713, CVSS 3.0: 7.5: fixed in 3.9.4
- CVE-2019-10946, CVSS 3.0: 7.5: not affected in 3.10.12
- CVE-2018-15881, CVSS 3.0: 7.5: fixed in 3.8.12
- CVE-2018-11322, CVSS 3.0: 7.5: fixed in 3.8.8
- CVE-2017-9933, CVSS 3.0: 7.5: not affected in 3.10.12
- CVE-2016-9838, CVSS 3.0: 7.5: not affected in 3.10.12
- CVE-2016-9837, CVSS 3.0: 7.5: not affected in 3.10.12
- CVE-2015-8565, CVSS 2.0: 7.5: not affected in 3.10.12
- CVE-2015-8564, CVSS 2.0: 7.5: not affected in 3.10.12
- CVE-2015-8562, CVSS 2.0: 7.5: not affected in 3.10.12
- CVE-2015-7858, CVSS 2.0: 7.5: not affected in 3.10.12
- CVE-2015-7857, CVSS 2.0: 7.5: not affected in 3.10.12
- CVE-2015-7297, CVSS 2.0: 7.5: not affected in 3.10.12
- CVE-2014-7984, CVSS 2.0: 7.5: not affected in 3.10.12
And 110 more.
334 vulnerabilities of Joomla! have no version information in the NVD and are not assigned to any branch.
Get notified
Add Joomla! with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add Joomla! 3