Skip to content
COOEY

FAIL › dossier

gridbox

PRODUCT

Failure events
4
Zero-days
0
RCEs
0
On KEV
0
Critical
4
Worst shame
85
Dossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 4
DATEEVENTSEVSUMMARY
2026-07-29 CVE-2026-65884 critical Unauthenticated actors can register new Joomla admin accounts via a flawed registration method in Gridbox < 2.20.2.
2026-07-29 CVE-2026-65888 critical CVE-2026-65888 allows attackers to take over any user account on Joomla sites using the Gridbox extension via the socialLogin method.
2026-07-29 CVE-2026-65890 critical Unauthenticated SQL injection in Balbooa's Gridbox Joomla extension allows attackers to extract or modify database contents without authentication.
2026-07-29 CVE-2026-65887 critical Unauthenticated password reset in Gridbox Joomla extension allows attackers to compromise user accounts.