{"id":8341,"date":"2015-10-22T09:03:16","date_gmt":"2015-10-22T15:03:16","guid":{"rendered":"https:\/\/www.siteground.com\/blog\/?p=8341"},"modified":"2025-09-18T14:49:06","modified_gmt":"2025-09-18T14:49:06","slug":"joomla-vulnerability-3-4-5-security-release","status":"publish","type":"post","link":"https:\/\/www.siteground.com\/blog\/joomla-vulnerability-3-4-5-security-release\/","title":{"rendered":"Core Joomla! Vulnerability Patched in Version 3.4.5 Security Release"},"content":{"rendered":"

\"joomla-vulnerability\"<\/p>\n

A few days ago, a critical vulnerability in the Joomla! core was found. It comes from an unsanitized input in the Joomla! core, which makes an SQL injection possible. The result of such an attack can lead to totally compromised websites – stolen login details, hijacking website access, malicious file uploads, etc. It\u2019s a serious threat, without a doubt, and one that applies to all Joomla! 3.2 versions and above.
\n<\/p>\n

Server-level protection with custom WAF rules<\/h3>\n

As always, when facing a vulnerability, we tend to take immediate actions in-house. We wrote custom rules inside our Web Application Firewall (WAF) to prevent potential exploits in our Joomla sites at the server level. We have shared our firewall rules with the Joomla! Security Team, in case they could be of help to other hosts or developers that want to protect their websites.<\/p>\n

Autoupdate our Joomla! sites to the new and secure version 3.4.5<\/h3>\n

No matter how many server level fences we put up, it\u2019s always best to have the vulnerability patched and all holes closed. That is why, today, after Joomla! released the official patch for the vulnerability with version 3.4.5, we will update all Joomlas that have enabled Auto Updates to the new and secure version.<\/p>\n

If you have disabled the Joomla autoupdate feature from your SiteGround cPanel, please make sure you update your Joomla as soon as possible on your own.<\/p>\n\n

[subscribe_cta]<\/p>\n","protected":false},"excerpt":{"rendered":"A few days ago, a critical vulnerability in the Joomla! core was found. It comes from an unsanitized input in the Joomla! core, which makes an SQL injection possible. The result of such an attack can lead to totally compromised websites - stolen login details, hijacking website access, malicious file uploads, etc. It\u2019s a serious…","protected":false},"author":57,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2098,12],"tags":[],"class_list":["post-8341","post","type-post","status-publish","format-standard","hentry","category-hosting-insights","category-security"],"yoast_head":"\nCore Joomla! Vulnerability Patched in Version 3.4.5 Security Release : SiteGround Blog<\/title>\n<meta name=\"description\" content=\"A few days ago, a critical vulnerability in the Joomla! core was found. It comes from an unsanitized input in the Joomla! core, which makes an SQL\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Core Joomla! Vulnerability Patched in Version 3.4.5 Security Release\" \/>\n<meta property=\"og:description\" content=\"A few days ago, a critical vulnerability in the Joomla! core was found. It comes from an unsanitized input in the Joomla! core, which makes an SQL\" \/>\n<meta property=\"og:url\" content=\"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/\" \/>\n<meta property=\"og:site_name\" content=\"SiteGround\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/siteground\" \/>\n<meta property=\"article:published_time\" content=\"2015-10-22T15:03:16+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-18T14:49:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"660\" \/>\n\t<meta property=\"og:image:height\" content=\"220\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Daniel Kanchev\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@siteground\" \/>\n<meta name=\"twitter:site\" content=\"@siteground\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Daniel Kanchev\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/\"},\"author\":{\"name\":\"Daniel Kanchev\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/380162a677d6c37329e9a12baa334572\"},\"headline\":\"Core Joomla! Vulnerability Patched in Version 3.4.5 Security Release\",\"datePublished\":\"2015-10-22T15:03:16+00:00\",\"dateModified\":\"2025-09-18T14:49:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/\"},\"wordCount\":246,\"commentCount\":3,\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg\",\"articleSection\":[\"Hosting Insights\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/\",\"name\":\"Core Joomla! Vulnerability Patched in Version 3.4.5 Security Release : SiteGround Blog\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg\",\"datePublished\":\"2015-10-22T15:03:16+00:00\",\"dateModified\":\"2025-09-18T14:49:06+00:00\",\"description\":\"A few days ago, a critical vulnerability in the Joomla! core was found. It comes from an unsanitized input in the Joomla! core, which makes an SQL\",\"breadcrumb\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/#primaryimage\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg\",\"width\":660,\"height\":220,\"caption\":\"joomla-vulnerability\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/newblog.siteground.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Core Joomla! Vulnerability Patched in Version 3.4.5 Security Release\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"name\":\"SiteGround Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\",\"name\":\"SiteGround Blog\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"width\":1200,\"height\":400,\"caption\":\"SiteGround Blog\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/siteground\",\"https:\/\/x.com\/siteground\",\"https:\/\/www.instagram.com\/siteground\/\",\"https:\/\/www.youtube.com\/@siteground\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/380162a677d6c37329e9a12baa334572\",\"name\":\"Daniel Kanchev\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/f0baefb86ae4d35a2e71cb0966e1847f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/f0baefb86ae4d35a2e71cb0966e1847f?s=96&d=mm&r=g\",\"caption\":\"Daniel Kanchev\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/daniel-kanchev-29716455\/\"],\"url\":\"https:\/\/newblog.siteground.com\/en\/author\/daniel\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Core Joomla! Vulnerability Patched in Version 3.4.5 Security Release : SiteGround Blog","description":"A few days ago, a critical vulnerability in the Joomla! core was found. It comes from an unsanitized input in the Joomla! core, which makes an SQL","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/","og_locale":"en_US","og_type":"article","og_title":"Core Joomla! Vulnerability Patched in Version 3.4.5 Security Release","og_description":"A few days ago, a critical vulnerability in the Joomla! core was found. It comes from an unsanitized input in the Joomla! core, which makes an SQL","og_url":"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/","og_site_name":"SiteGround","article_publisher":"https:\/\/www.facebook.com\/siteground","article_published_time":"2015-10-22T15:03:16+00:00","article_modified_time":"2025-09-18T14:49:06+00:00","og_image":[{"width":660,"height":220,"url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg","type":"image\/jpeg"}],"author":"Daniel Kanchev","twitter_card":"summary_large_image","twitter_creator":"@siteground","twitter_site":"@siteground","twitter_misc":{"Written by":"Daniel Kanchev","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/#article","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/"},"author":{"name":"Daniel Kanchev","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/380162a677d6c37329e9a12baa334572"},"headline":"Core Joomla! Vulnerability Patched in Version 3.4.5 Security Release","datePublished":"2015-10-22T15:03:16+00:00","dateModified":"2025-09-18T14:49:06+00:00","mainEntityOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/"},"wordCount":246,"commentCount":3,"publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg","articleSection":["Hosting Insights","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/","url":"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/","name":"Core Joomla! Vulnerability Patched in Version 3.4.5 Security Release : SiteGround Blog","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/#primaryimage"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg","datePublished":"2015-10-22T15:03:16+00:00","dateModified":"2025-09-18T14:49:06+00:00","description":"A few days ago, a critical vulnerability in the Joomla! core was found. It comes from an unsanitized input in the Joomla! core, which makes an SQL","breadcrumb":{"@id":"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/#primaryimage","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg","width":660,"height":220,"caption":"joomla-vulnerability"},{"@type":"BreadcrumbList","@id":"https:\/\/newblog.siteground.com\/en\/joomla-vulnerability-3-4-5-security-release\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/newblog.siteground.com\/en\/"},{"@type":"ListItem","position":2,"name":"Core Joomla! Vulnerability Patched in Version 3.4.5 Security Release"}]},{"@type":"WebSite","@id":"https:\/\/newblog.siteground.com\/en\/#website","url":"https:\/\/newblog.siteground.com\/en\/","name":"SiteGround Blog","description":"","publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/newblog.siteground.com\/en\/#organization","name":"SiteGround Blog","url":"https:\/\/newblog.siteground.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","width":1200,"height":400,"caption":"SiteGround Blog"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/siteground","https:\/\/x.com\/siteground","https:\/\/www.instagram.com\/siteground\/","https:\/\/www.youtube.com\/@siteground"]},{"@type":"Person","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/380162a677d6c37329e9a12baa334572","name":"Daniel Kanchev","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/f0baefb86ae4d35a2e71cb0966e1847f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f0baefb86ae4d35a2e71cb0966e1847f?s=96&d=mm&r=g","caption":"Daniel Kanchev"},"sameAs":["https:\/\/www.linkedin.com\/in\/daniel-kanchev-29716455\/"],"url":"https:\/\/newblog.siteground.com\/en\/author\/daniel\/"}]}},"_links":{"self":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/8341","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/users\/57"}],"replies":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/comments?post=8341"}],"version-history":[{"count":1,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/8341\/revisions"}],"predecessor-version":[{"id":17893,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/8341\/revisions\/17893"}],"wp:attachment":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/media?parent=8341"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/categories?post=8341"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/tags?post=8341"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}