HIGHVulnerability
Verified
Global

CISA KEV: Widget Factory Joomla Content Editor — Widget Factory Joomla Content Editor Improper Access Control Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP code via the creation of new editor profiles for unauthenticated users.

Analysis

Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP code via the creation of new editor profiles for unauthenticated users. Added to CISA Known Exploited Vulnerabilities catalog on 2026-06-16. Remediation due: 2026-06-19.

Indicators of Compromise (1)

CVE (1)
CVE-2026-48907
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Jun 16, 2026. Verified by: CISA.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-12415 — The Invoice Generator plugin for WordPress is vulnerable to privilege escalation...

The Invoice Generator plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the pravel_invoice_edit_account() AJAX action in versions up to, and including, 1.0.0. The handler is exposed via wp_ajax_nopriv_pravel_invoice_edit_account, accepts an attacker-controlled user_id and user_email from POST data, and calls wp_update_user() without verifying authentic

CVE-2026-12415
NIST NVD
MEDIUMVulnerability

The Chinese Control the Majority of Argentina’s Squid Fleet

Chinese companies control nearly two-thirds of Argentina’s own squid fleet.

Schneier on Security
MEDIUMVulnerability

HHS Agencies Flesh Out Priorities for Healthcare AI

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/hhs-agencies-flesh-out-priorities-for-healthcare-ai-image_small-1-a-32091.jpg" align=right hspace=4><b>Coordinated 'OneHHS' AI Governance, Implementation, Guidance Efforts Under Way</b><br>The U.S. Department of Health and Human Services is preparing guidance aimed at accelerating the adoption of healthcare AI, with agency officia

Bank Info Security