← Back

Up

up

Vendor: Lomart • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Lomart
1Up
Oct 20, 2026
Sep 26, 2026
10.0 CRITICAL· v4
9.8 CRITICAL· v3
N/A· v2
Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
1Lomart
1Up
Oct 20, 2026
Sep 26, 2026
8.3 HIGH· v4
9.8 CRITICAL· v3
N/A· v2
Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
1Lomart
1Up
Oct 20, 2026
Sep 26, 2026
9.2 CRITICAL· v4
7.5 HIGH· v3
N/A· v2
Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
1Lomart
1Up
Oct 20, 2026
Sep 26, 2026
9.4 CRITICAL· v4
8.8 HIGH· v3
N/A· v2
Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29