CVE-2026-77997
Joomla Extension - yootheme.com - Authenticated, privileged information disclosure about site modules YOOtheme Pro 1.0.0-5.0.40
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with com_template editing permissions to access information about arbitrary modules without the respective com_modules permissions.
| CWE | CWE-284 |
| Vendor | yootheme.com |
| Product | yootheme pro extension for joomla |
| Published | Aug 25, 2026 |
| Last Updated | Aug 25, 2026 |
Stay Ahead of the Next One
Get instant alerts for yootheme.com yootheme pro extension for joomla
Be the first to know when new unknown vulnerabilities affecting yootheme.com yootheme pro extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
yootheme.com / YOOtheme Pro extension for Joomla
1.0.0-5.0.41