Critical severity9.1NVD Advisory· Published Jul 21, 2026· Updated Jul 23, 2026

CVE-2026-62415

Description

Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2 - The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets.

Affected products

Joomla/Membership Prollm-create
Range: <4.6.2
Joomdonation.com/Membership Prollm-fuzzy
Range: <4.6.2

Patches

Vulnerability mechanics

References

joomdonation.com/joomla-extensions/membership-pro-joomla-membership-subscription.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000