CVE-2026-65881: Joomdle.com Joomdle Component For Joomla

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Joomla Extension - joomdle.com - Insecure default configuration allows read/write user account access in Joomdle < 3.1.1 - The default configuration of the extension allowed read access and password reset of CMS accounts.

Affected products

• Joomdle.com Joomdle Component For Joomla: version 0.7.0-3.0.1 only

Published 2026-07-28. Last modified 2026-07-28.