hikashop.com

Products

ProductCVEsExploitedLatest
HikaShop component for Joomla4–Mar 15, 2025
Hikashop extension for Joomla1–Jul 20, 2026

Exploited and recent CVEs

  • CVE-2026-61901 Medium 6.1 Joomla Extension - hikashop.com - Open redirect in Hikashop < 6.5.2 0.2%
  • CVE-2025-25225 Medium 6.5 Extension - hikashop.com - Privilege escalation vulnerability Hikashop component version 1.0.0 - 5.1.3 for Joomla 0.2%
  • CVE-2025-22210 High 7.2 Extension - hikashop.com - SQL injection in Hikashop component version 3.3.0 - 5.1.4 for Joomla 0.5%
  • CVE-2024-40746 Medium 5.4 Extension - hikashop.com - Stored cross site scripting vulnerability in Hikashop component for Joomla < 5.1.1 0.3%
  • CVE-2023-38044 Unrated Extension - hikashop.com - SQLi in HikaShop component for Joomla <= 4.7.2 0.6%