CVE-2026-62415 PUBLISHED

Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2

Assigner: Joomla
Reserved: 14.07.2026 Published: 21.07.2026 Updated: 21.07.2026

The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets.

Product Status

Vendor joomdonation.com
Product Membership Pro extension for Joomla
Versions Default: unaffected
  • Version 1.0-4.6.1 is affected

References

Problem Types

  • CWE-1188: Initialization of a Resource with an Insecure Default CWE