SECURITYJun 17 · 10:09 UTCBLEEPING COMPUTERSergiu Gatlan

CISA orders feds to patch max severity Joomla plugin flaw by Friday

CISA has mandated federal agencies to address a maximum-severity vulnerability in the Joomla Content Editor (JCE) plugin, which is currently being exploited. The flaw is part of the Widget Factory plugin and requires immediate patching by Friday.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

U.S. Cybersecurity and Infrastructure Security AgencyorganizationJoomla Content Editor (JCE) plugintopicWidget Factory plugintopicfederal agenciesorganization

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYMay 27 · 10:06 UTC
CISA gives feds 4 days to patch actively exploited cPanel plugin flaw
SECURITYApr 8 · 18:15 UTC
CISA orders feds to patch exploited Ivanti EPMM flaw by Sunday
SECURITYJun 12 · 08:26 UTC
CISA orders feds to patch actively exploited Ivanti flaw by Sunday
SECURITYMay 21 · 13:58 UTC
Max severity Cisco Secure Workload flaw gives Site Admin privileges
SECURITYMay 1 · 16:20 UTC
Federal agencies must patch cPanel bug by Sunday, CISA says
SECURITYMay 15 · 13:16 UTC
CISA orders all federal agencies to patch exploited bug in Cisco SD-WAN systems by Sunday