CVE-2026-78074: Miniorgange.com Custom API For Joomla Free Extension For Joomla

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated actors to delete arbitrary installed extensions. Only the free versions of the miniOrange plugins are affected.

Affected products

• Miniorgange.com Custom API For Joomla Free Extension For Joomla: version 1.0.0-4.2 only
• Miniorgange.com Import Export Users For Joomla Free Extension For Joomla: version 1.0.0-4.6 only
• Miniorgange.com Joomai - Ai Assistant For Joomla Free Extension For Joomla: version 1.0.0-1.0.5 only
• Miniorgange.com Joomshield By Miniorange Free Extension For Joomla: version 1.0.0-1.0.2 only
• Miniorgange.com Keycloak User Sync / User Management Free Extension For Joomla: version 1.0.0-1.1.0 only
• Miniorgange.com LDAP Integration With Active Directory And Openldap - Ntlm & Kerberos Login Free Extension For Joomla: version 1.0.0-6.4.7 only
• Miniorgange.com Login With Keycloak OAuth Single Sign-On SSO | Login With Keycloak Free Extension For Joomla: version 1.0.0-1.2.2 only
• Miniorgange.com Miniorange OAuth Client Free Extension For Joomla: version 1.0.0-3.2.0 only
• Miniorgange.com Miniorange User Provisioning With Azure For Joomla Free Extension For Joomla: version 1.0.0-1.1.0 only
• Miniorgange.com OAuth Server For Joomla Free Extension For Joomla: version 1.0.0-5.1.5 only
• Miniorgange.com OAuth Single Sign-On - Oidc SSO | Login With Azure Ad Free Extension For Joomla: version 1.0.0-1.2.2 only
• Miniorgange.com Okta User Sync/bi-Directional User Management Free Extension For Joomla: version 1.0.0-1.1.0 only
• Miniorgange.com OTP Verification For Joomla Free Extension For Joomla: version 1.0.0-6.6 only
• Miniorgange.com Restrict Files / Folders / Media Access For Joomla Free Extension For Joomla: version 1.0.0-3.7 only
• Miniorgange.com SAML 2.0 Idp For Joomla Free Extension For Joomla: version 1.0.0-7.7 only
• Miniorgange.com SAML SP Single Sign On – Login With Adfs Free Extension For Joomla: version 1.0.0-6.4 only
• Miniorgange.com SAML SSO For Joomla Free Extension For Joomla: version 1.0.0-11.0.2 only
• Miniorgange.com SAML SSO Login With Google Apps Free Extension For Joomla: version 1.0.0-6.4 only
• Miniorgange.com Scim User Provisioning For Joomla Free Extension For Joomla: version 1.0.0-4.0.4 only
• Miniorgange.com Single Sign On For Educational Institutes Free Extension For Joomla: version 1.0.0-1.2.2 only
• Miniorgange.com Staff/employee Business Directory Search For Active Directory Free Extension For Joomla: version 1.0.0-2.0.4 only
• Miniorgange.com Two Factor Authentication 2fa For Joomla Free Extension For Joomla: version 1.0.0-5.0.9 only
• Miniorgange.com WEB3 – Crypto Wallet Login & Nft Token Gating Free Extension For Joomla: version 1.0.0-3.5.1 only

Published 2026-08-31. Last modified 2026-09-08.