CVE-2026-75115

UNKNOWN 0.0

Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40 - The Filesystem source's path filter is vulnerable to glob-based pattern attacks, allowing authorized users to read arbitrary files.

CWE	CWE-22
Vendor	yootheme.com
Product	yootheme pro extension for joomla
Published	Aug 21, 2026

Stay Ahead of the Next One

Get instant alerts for yootheme.com yootheme pro extension for joomla

Be the first to know when new unknown vulnerabilities affecting yootheme.com yootheme pro extension for joomla are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

yootheme.com / YOOtheme Pro extension for Joomla

2.3.0-5.0.40

References

NVD ↗ CVE.org ↗ EPSS Data ↗

yootheme.com: https://www.yootheme.com/

Credits

Jörg Steinsträter, https://www.linkedin.com/in/j%C3%B6rg-steinstr%C3%A4ter/