← All credits
Ala Arfaoui
27 vulnerability records and advisories credit this contributor.
CVE-2026-88857
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7
CVE-2026-88856
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7
CVE-2026-88855
Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7
CVE-2026-88854
Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7
CVE-2026-77994
Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5
CVE-2026-77993
Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5
CVE-2026-74254
Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5
CVE-2019-25222
Thumbnail carousel slider <= 1.0.4 - Authenticated (Admin+) SQL Injection
CVE-2015-10147
Easy Testimonial Slider and Form <= 1.0.2 - Authenticated (Admin+) SQL injection
CVE-2023-6197
Audio Merchant <= 5.0.4 - Cross-Site Request Forgery to Settings Modifcation and Stored Cross-Site Scripting