widgetfactorylimited records
4 published records for vendor widgetfactorylimited.
Researcher profile
- Entered KEV
- 1 · 25%
- Weaponized
- 1 · 25%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- 11 days
Recurring classes
- CWE-20 Improper Input Validation1
- CWE-284 Improper Access Control1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
75This week | CVE-2026-48907Weaponized | Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5widgetfactorylimited · jce · CWE-284 | Critical10.0 | KEV | 16.1% | Jun 5, 2026 |
35Monitor | CVE-2015-7339No exploit | JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com_jce/editor/librariewidgetfactorylimited · jce · CWE-434 | High8.8 | — | 1.1% | Mar 9, 2020 |
26Monitor | CVE-2026-65891Proof of concept | Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.9.99.widgetfactorylimited · jce · CWE-20 | Medium6.5 | — | 0.3% | Jul 29, 2026 |
24Monitor | CVE-2011-5134No exploit | Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote aujoomla · joomla\! | Medium6.0 | — | 1.0% | Aug 30, 2012 |
- CVE-2026-4890775This week
Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5
CriticalCVSS 10.0KEVWeaponizedEPSS 16%widgetfactorylimited · jceJun 5, 2026
- CVE-2015-733935Monitor
JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com_jce/editor/librarie
HighCVSS 8.8No exploitEPSS 1%widgetfactorylimited · jceMar 9, 2020
- CVE-2026-6589126Monitor
Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.9.99.
MediumCVSS 6.5Proof of conceptEPSS 0%widgetfactorylimited · jceJul 29, 2026
- CVE-2011-513424Monitor
Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote au
MediumCVSS 6.0No exploitEPSS 1%joomla · joomla\!Aug 30, 2012