CVE-2026-58149: Joomdonation.com Events Booking Extension For Joomla

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking is vulnerable to an unauthenticated user enumeration that allows to retrieve account usernames and email addresses.

Affected products

• Joomdonation.com Events Booking Extension For Joomla: version 1.0-5.8.0 only

Published 2026-07-17. Last modified 2026-07-23.