CVE-2026-77997: Yootheme.com Yootheme Pro Extension For Joomla

Medium severity, CVSS 5.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with com_template editing permissions to access information about arbitrary modules without the respective com_modules permissions.

Affected products

• Yootheme.com Yootheme Pro Extension For Joomla: version 1.0.0-5.0.41 only

Published 2026-08-25. Last modified 2026-09-23.