{"id":8448,"date":"2015-12-15T01:57:43","date_gmt":"2015-12-15T07:57:43","guid":{"rendered":"https:\/\/www.siteground.com\/blog\/?p=8448"},"modified":"2025-09-18T14:49:06","modified_gmt":"2025-09-18T14:49:06","slug":"critical-vulnerability-in-joomla-fixed","status":"publish","type":"post","link":"https:\/\/www.siteground.com\/blog\/critical-vulnerability-in-joomla-fixed\/","title":{"rendered":"Critical Vulnerability in Joomla Fixed on Zero-day"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-8343\" src=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg\" alt=\"joomla-vulnerability\" width=\"660\" height=\"220\"><\/p>\n<p>Yesterday, a serious vulnerability that affects all major Joomla versions was disclosed. Using this security breach a hacker could do a full remote command execution on the targeted site. We have worked together with the Joomla Security teams and came up with a rule in our WAF (web application firewall) that would block hacking attempts using this vulnerability and we don&#8217;t have reports for hacked accounts through this exploit.<\/p>\n<p><!--more--><\/p>\n<p>Shortly after we have patched all our servers, a <a href=\"https:\/\/docs.joomla.org\/Security_hotfixes_for_Joomla_EOL_versions\" target=\"_blank\" rel=\"noopener noreferrer\">new version of Joomla has been released<\/a>. Joomla sites, which have our autoupdate service on, will be updated to that new version today. If you have not switched on the Joomla autoupdates on, we would recommend you to upgrade your application to the latest version of its branch in order to fully patch this vulnerability.<\/p>\n\n<p>[subscribe_cta]<\/p>\n","protected":false},"excerpt":{"rendered":"Yesterday, a serious vulnerability that affects all major Joomla versions was disclosed. Using this security breach a hacker could do a full remote command execution on the targeted site. We have worked together with the Joomla Security teams and came up with a rule in our WAF (web application firewall) that would block hacking attempts&hellip;","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2098,2018,12],"tags":[],"class_list":["post-8448","post","type-post","status-publish","format-standard","hentry","category-hosting-insights","category-product-updates","category-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.2 (Yoast SEO v24.2) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Critical Vulnerability in Joomla Fixed on Zero-day : SiteGround Blog<\/title>\n<meta name=\"description\" content=\"Yesterday, a serious vulnerability that affects all major Joomla versions was disclosed. Using this security breach a hacker could do a full remote\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Critical Vulnerability in Joomla Fixed on Zero-day\" \/>\n<meta property=\"og:description\" content=\"Yesterday, a serious vulnerability that affects all major Joomla versions was disclosed. Using this security breach a hacker could do a full remote\" \/>\n<meta property=\"og:url\" content=\"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/\" \/>\n<meta property=\"og:site_name\" content=\"SiteGround\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/siteground\" \/>\n<meta property=\"article:published_time\" content=\"2015-12-15T07:57:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-18T14:49:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"660\" \/>\n\t<meta property=\"og:image:height\" content=\"220\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Hristo Pandjarov\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@siteground\" \/>\n<meta name=\"twitter:site\" content=\"@siteground\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Hristo Pandjarov\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/\"},\"author\":{\"name\":\"Hristo Pandjarov\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390\"},\"headline\":\"Critical Vulnerability in Joomla Fixed on Zero-day\",\"datePublished\":\"2015-12-15T07:57:43+00:00\",\"dateModified\":\"2025-09-18T14:49:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/\"},\"wordCount\":142,\"commentCount\":2,\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg\",\"articleSection\":[\"Hosting Insights\",\"Product Updates\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/\",\"name\":\"Critical Vulnerability in Joomla Fixed on Zero-day : SiteGround Blog\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg\",\"datePublished\":\"2015-12-15T07:57:43+00:00\",\"dateModified\":\"2025-09-18T14:49:06+00:00\",\"description\":\"Yesterday, a serious vulnerability that affects all major Joomla versions was disclosed. Using this security breach a hacker could do a full remote\",\"breadcrumb\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/#primaryimage\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg\",\"width\":660,\"height\":220,\"caption\":\"joomla-vulnerability\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/newblog.siteground.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Critical Vulnerability in Joomla Fixed on Zero-day\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"name\":\"SiteGround Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\",\"name\":\"SiteGround Blog\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"width\":1200,\"height\":400,\"caption\":\"SiteGround Blog\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/siteground\",\"https:\/\/x.com\/siteground\",\"https:\/\/www.instagram.com\/siteground\/\",\"https:\/\/www.youtube.com\/@siteground\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390\",\"name\":\"Hristo Pandjarov\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g\",\"caption\":\"Hristo Pandjarov\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/hristo-pandjarov-05194841\/\"],\"url\":\"https:\/\/newblog.siteground.com\/en\/author\/hristo\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Critical Vulnerability in Joomla Fixed on Zero-day : SiteGround Blog","description":"Yesterday, a serious vulnerability that affects all major Joomla versions was disclosed. Using this security breach a hacker could do a full remote","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/","og_locale":"en_US","og_type":"article","og_title":"Critical Vulnerability in Joomla Fixed on Zero-day","og_description":"Yesterday, a serious vulnerability that affects all major Joomla versions was disclosed. Using this security breach a hacker could do a full remote","og_url":"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/","og_site_name":"SiteGround","article_publisher":"https:\/\/www.facebook.com\/siteground","article_published_time":"2015-12-15T07:57:43+00:00","article_modified_time":"2025-09-18T14:49:06+00:00","og_image":[{"width":660,"height":220,"url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg","type":"image\/jpeg"}],"author":"Hristo Pandjarov","twitter_card":"summary_large_image","twitter_creator":"@siteground","twitter_site":"@siteground","twitter_misc":{"Written by":"Hristo Pandjarov","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/#article","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/"},"author":{"name":"Hristo Pandjarov","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390"},"headline":"Critical Vulnerability in Joomla Fixed on Zero-day","datePublished":"2015-12-15T07:57:43+00:00","dateModified":"2025-09-18T14:49:06+00:00","mainEntityOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/"},"wordCount":142,"commentCount":2,"publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg","articleSection":["Hosting Insights","Product Updates","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/","url":"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/","name":"Critical Vulnerability in Joomla Fixed on Zero-day : SiteGround Blog","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/#primaryimage"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg","datePublished":"2015-12-15T07:57:43+00:00","dateModified":"2025-09-18T14:49:06+00:00","description":"Yesterday, a serious vulnerability that affects all major Joomla versions was disclosed. Using this security breach a hacker could do a full remote","breadcrumb":{"@id":"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/#primaryimage","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/10\/joomla-valnerability-fixed.jpg","width":660,"height":220,"caption":"joomla-vulnerability"},{"@type":"BreadcrumbList","@id":"https:\/\/newblog.siteground.com\/en\/critical-vulnerability-in-joomla-fixed\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/newblog.siteground.com\/en\/"},{"@type":"ListItem","position":2,"name":"Critical Vulnerability in Joomla Fixed on Zero-day"}]},{"@type":"WebSite","@id":"https:\/\/newblog.siteground.com\/en\/#website","url":"https:\/\/newblog.siteground.com\/en\/","name":"SiteGround Blog","description":"","publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/newblog.siteground.com\/en\/#organization","name":"SiteGround Blog","url":"https:\/\/newblog.siteground.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","width":1200,"height":400,"caption":"SiteGround Blog"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/siteground","https:\/\/x.com\/siteground","https:\/\/www.instagram.com\/siteground\/","https:\/\/www.youtube.com\/@siteground"]},{"@type":"Person","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390","name":"Hristo Pandjarov","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g","caption":"Hristo Pandjarov"},"sameAs":["https:\/\/www.linkedin.com\/in\/hristo-pandjarov-05194841\/"],"url":"https:\/\/newblog.siteground.com\/en\/author\/hristo\/"}]}},"_links":{"self":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/8448","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/comments?post=8448"}],"version-history":[{"count":4,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/8448\/revisions"}],"predecessor-version":[{"id":17889,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/8448\/revisions\/17889"}],"wp:attachment":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/media?parent=8448"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/categories?post=8448"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/tags?post=8448"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}