themexpert.com

Products

ProductCVEsExploitedLatest
Quix Page Builder Pro extension for Joomla7–Jul 20, 2026
JMedia extension for Joomla3–Jul 20, 2026

Exploited and recent CVEs

  • CVE-2026-60027 High 8.7 Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder < 6.2.1 0.5%
  • CVE-2026-60031 Medium 6.9 Joomla Extension - themexpert.com - Information disclosure in Quix Page Builder < 6.2.1 0.4%
  • CVE-2026-60029 Medium 5.1 Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 0.4%
  • CVE-2026-60026 High 8.9 Joomla Extension - themexpert.com - Authenticated PHP code execution in Quix Page Builder < 6.2.1 0.5%
  • CVE-2026-60034 Critical 9.4 Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension < 1.6.0 0.4%
  • CVE-2026-60030 High 8.7 Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder < 6.2.1 0.4%
  • CVE-2026-60033 Medium 5.1 Joomla Extension - themexpert.com - SSRF via remote download in JMedia Extension < 1.6.0 0.4%
  • CVE-2026-60032 Critical 9.4 Joomla Extension - themexpert.com - Authenticated arbitrary file upload in JMedia < 1.6.0 0.4%
  • CVE-2026-60028 High 8.6 Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 0.4%
  • CVE-2026-58078 High 8.7 Joomla Extension - themexpert.com - Unauthenticated SQL injection in Quix Page Builder Pro < 6.2.1 0.4%