Log in Start free

phoca.cz

Products

ProductCVEsExploitedLatest
Phoca Commander extension for Joomla5–Aug 7, 2026
Phoca Cart extension for Joomla4–Oct 5, 2026
Phoca Download extension for Joomla2–Oct 27, 2026
phoca.cz - Phoca Maps for Joomla1–Apr 11, 2026
Phoca Gallery extension for Joomla1–Oct 23, 2026
Phoca Guestbook extension for Joomla1–Jul 23, 2026
Phoca Maps extension for Joomla1–Jul 23, 2026
phoca.cz - Phoca Commander for Joomla1–Aug 15, 2025
phoca.cz Phoca Download extension for Joomla1–Jul 11, 2026

Exploited and recent CVEs

  • CVE-2026-102787 Medium 5.3 Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5 0.2%
  • CVE-2026-102786 High 8.6 Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Gallery 4.5.0 - 6.1.5 0.3%
  • CVE-2026-102775 High 8.7 Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8 0.4%
  • CVE-2026-76564 High 8.6 Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7 0.4%
  • CVE-2026-76569 Medium 5.3 Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4 0.4%
  • CVE-2026-76565 Medium 5.3 Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7 0.4%
  • CVE-2026-74251 Critical 9.3 Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 0.4%
  • CVE-2026-66491 High 8.2 Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 0.5%
  • CVE-2026-66492 Medium 6.1 Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 0.6%
  • CVE-2026-66493 Medium 6.4 Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3 0.5%
  • CVE-2026-65765 Medium 6.9 Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.1 0.5%
  • CVE-2026-65764 Medium 5.1 Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.1.1 0.4%
  • CVE-2026-65762 Medium 5.1 Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 5.0.0-6.1.0 0.4%
  • CVE-2026-65763 Medium 5.1 Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.0.4 0.4%
  • CVE-2026-57828 Critical 9.0 Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3 0.5%
  • CVE-2026-23900 Medium 6.5 Extension - phoca.cz - Stored XSS vectors in Phoca Maps component 5.0.0 - 6.0.2 for Joomla 0.2%
  • CVE-2025-54473 Critical 9.2 Extension - phoca.cz - Authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla 0.4%