CVE-2026-62415

CVSS Score & Metrics

Base Score

9.1 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N                                    

The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets.

Published Date

July 21, 2026

Last Modified

July 22, 2026

CWE ID

CWE-1188

Source

NVD

Vendor

joomdonation.com

Product

Membership Pro extension for Joomla