{"id":6960,"date":"2014-07-31T06:42:28","date_gmt":"2014-07-31T12:42:28","guid":{"rendered":"https:\/\/www.siteground.com\/blog\/?p=6960"},"modified":"2025-09-18T14:49:22","modified_gmt":"2025-09-18T14:49:22","slug":"joomla-kunena-vulnerability-fixed","status":"publish","type":"post","link":"https:\/\/www.siteground.com\/blog\/joomla-kunena-vulnerability-fixed\/","title":{"rendered":"Joomla! Kunena Vulnerability Fixed on all SiteGround Servers"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6964\" src=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/07\/blog.jpg\" alt=\"blog\" width=\"540\" height=\"181\"><\/p>\n<p>Critical vulnerability in the famous Kunena forum component for Joomla! were announced three days ago and a new version of the component that addresses the issue was released. According to the <a href=\"https:\/\/www.kunena.org\/blog\/139-kunena-3-0-6-released\" target=\"_blank\" rel=\"noopener noreferrer\">official Kunena blog post<\/a> all extension that are not updated to the latest version are vulnerable and the attackers may use XSS and SQL injection to gain full access to a Joomla! site.<\/p>\n<p><!--more--><\/p>\n<p>Immediately after the Kunena team&nbsp;<a href=\"https:\/\/twitter.com\/kunena\/status\/493665050939228160\" target=\" target=\" rel=\"noopener noreferrer\">tweeted<\/a>&nbsp;about the issue SiteGround security team took rapid actions to protect all customers hosted on our servers. I have personally contacted the developers of the component and we worked together to write special rules for our web application firewall that will filter out all malicious requests that try to take advantage of this exploit.<\/p>\n<p>Even though we protected all of our customers, no matter which version of Kunena they use, we still advise all users to upgrade their Kunena component to the latest stable version 3.0.6 in which the issue is fixed.<\/p>\n\n\n<p>[subscribe_cta]<\/p>\n","protected":false},"excerpt":{"rendered":"Critical vulnerability in the famous Kunena forum component for Joomla! were announced three days ago and a new version of the component that addresses the issue was released. According to the official Kunena blog post all extension that are not updated to the latest version are vulnerable and the attackers may use XSS and SQL&hellip;","protected":false},"author":57,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2098,2018,12],"tags":[],"class_list":["post-6960","post","type-post","status-publish","format-standard","hentry","category-hosting-insights","category-product-updates","category-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.2 (Yoast SEO v24.2) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Joomla! Kunena Vulnerability Fixed on all SiteGround Servers : SiteGround Blog<\/title>\n<meta name=\"description\" content=\"Critical vulnerability in the famous Kunena forum component for Joomla! were announced three days ago and a new version of the component that addresses\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Joomla! Kunena Vulnerability Fixed on all SiteGround Servers\" \/>\n<meta property=\"og:description\" content=\"Critical vulnerability in the famous Kunena forum component for Joomla! were announced three days ago and a new version of the component that addresses\" \/>\n<meta property=\"og:url\" content=\"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/\" \/>\n<meta property=\"og:site_name\" content=\"SiteGround\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/siteground\" \/>\n<meta property=\"article:published_time\" content=\"2014-07-31T12:42:28+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-18T14:49:22+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/07\/blog.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"540\" \/>\n\t<meta property=\"og:image:height\" content=\"181\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Daniel Kanchev\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@siteground\" \/>\n<meta name=\"twitter:site\" content=\"@siteground\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Daniel Kanchev\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/\"},\"author\":{\"name\":\"Daniel Kanchev\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/380162a677d6c37329e9a12baa334572\"},\"headline\":\"Joomla! Kunena Vulnerability Fixed on all SiteGround Servers\",\"datePublished\":\"2014-07-31T12:42:28+00:00\",\"dateModified\":\"2025-09-18T14:49:22+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/\"},\"wordCount\":173,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/07\/blog.jpg\",\"articleSection\":[\"Hosting Insights\",\"Product Updates\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/\",\"name\":\"Joomla! Kunena Vulnerability Fixed on all SiteGround Servers : SiteGround Blog\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/07\/blog.jpg\",\"datePublished\":\"2014-07-31T12:42:28+00:00\",\"dateModified\":\"2025-09-18T14:49:22+00:00\",\"description\":\"Critical vulnerability in the famous Kunena forum component for Joomla! were announced three days ago and a new version of the component that addresses\",\"breadcrumb\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/#primaryimage\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/07\/blog.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/07\/blog.jpg\",\"width\":540,\"height\":181},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/newblog.siteground.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Joomla! Kunena Vulnerability Fixed on all SiteGround Servers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"name\":\"SiteGround Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\",\"name\":\"SiteGround Blog\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"width\":1200,\"height\":400,\"caption\":\"SiteGround Blog\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/siteground\",\"https:\/\/x.com\/siteground\",\"https:\/\/www.instagram.com\/siteground\/\",\"https:\/\/www.youtube.com\/@siteground\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/380162a677d6c37329e9a12baa334572\",\"name\":\"Daniel Kanchev\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/f0baefb86ae4d35a2e71cb0966e1847f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/f0baefb86ae4d35a2e71cb0966e1847f?s=96&d=mm&r=g\",\"caption\":\"Daniel Kanchev\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/daniel-kanchev-29716455\/\"],\"url\":\"https:\/\/newblog.siteground.com\/en\/author\/daniel\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Joomla! Kunena Vulnerability Fixed on all SiteGround Servers : SiteGround Blog","description":"Critical vulnerability in the famous Kunena forum component for Joomla! were announced three days ago and a new version of the component that addresses","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/","og_locale":"en_US","og_type":"article","og_title":"Joomla! Kunena Vulnerability Fixed on all SiteGround Servers","og_description":"Critical vulnerability in the famous Kunena forum component for Joomla! were announced three days ago and a new version of the component that addresses","og_url":"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/","og_site_name":"SiteGround","article_publisher":"https:\/\/www.facebook.com\/siteground","article_published_time":"2014-07-31T12:42:28+00:00","article_modified_time":"2025-09-18T14:49:22+00:00","og_image":[{"width":540,"height":181,"url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/07\/blog.jpg","type":"image\/jpeg"}],"author":"Daniel Kanchev","twitter_card":"summary_large_image","twitter_creator":"@siteground","twitter_site":"@siteground","twitter_misc":{"Written by":"Daniel Kanchev","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/#article","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/"},"author":{"name":"Daniel Kanchev","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/380162a677d6c37329e9a12baa334572"},"headline":"Joomla! Kunena Vulnerability Fixed on all SiteGround Servers","datePublished":"2014-07-31T12:42:28+00:00","dateModified":"2025-09-18T14:49:22+00:00","mainEntityOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/"},"wordCount":173,"commentCount":0,"publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/07\/blog.jpg","articleSection":["Hosting Insights","Product Updates","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/","url":"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/","name":"Joomla! Kunena Vulnerability Fixed on all SiteGround Servers : SiteGround Blog","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/#primaryimage"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/07\/blog.jpg","datePublished":"2014-07-31T12:42:28+00:00","dateModified":"2025-09-18T14:49:22+00:00","description":"Critical vulnerability in the famous Kunena forum component for Joomla! were announced three days ago and a new version of the component that addresses","breadcrumb":{"@id":"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/#primaryimage","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/07\/blog.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/07\/blog.jpg","width":540,"height":181},{"@type":"BreadcrumbList","@id":"https:\/\/newblog.siteground.com\/en\/joomla-kunena-vulnerability-fixed\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/newblog.siteground.com\/en\/"},{"@type":"ListItem","position":2,"name":"Joomla! Kunena Vulnerability Fixed on all SiteGround Servers"}]},{"@type":"WebSite","@id":"https:\/\/newblog.siteground.com\/en\/#website","url":"https:\/\/newblog.siteground.com\/en\/","name":"SiteGround Blog","description":"","publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/newblog.siteground.com\/en\/#organization","name":"SiteGround Blog","url":"https:\/\/newblog.siteground.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","width":1200,"height":400,"caption":"SiteGround Blog"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/siteground","https:\/\/x.com\/siteground","https:\/\/www.instagram.com\/siteground\/","https:\/\/www.youtube.com\/@siteground"]},{"@type":"Person","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/380162a677d6c37329e9a12baa334572","name":"Daniel Kanchev","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/f0baefb86ae4d35a2e71cb0966e1847f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f0baefb86ae4d35a2e71cb0966e1847f?s=96&d=mm&r=g","caption":"Daniel Kanchev"},"sameAs":["https:\/\/www.linkedin.com\/in\/daniel-kanchev-29716455\/"],"url":"https:\/\/newblog.siteground.com\/en\/author\/daniel\/"}]}},"_links":{"self":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/6960","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/users\/57"}],"replies":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/comments?post=6960"}],"version-history":[{"count":3,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/6960\/revisions"}],"predecessor-version":[{"id":18102,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/6960\/revisions\/18102"}],"wp:attachment":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/media?parent=6960"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/categories?post=6960"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/tags?post=6960"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}