Unrestricted File Upload Vulnerability in Joomla Membership Pro Extension
CVE-2026-62415

Currently unrated

Key Information:

Vendor: Joomdonation.com
Status: Membership Pro Extension For Joomla
Vendor: CVE Published:; 21 July 2026

🔔 Create Joomdonation.com Vulnerability Alert

What is CVE-2026-62415?

A significant security flaw exists in the Joomla extension Membership Pro prior to version 4.6.2, where unauthenticated users can upload media assets without proper validation. This oversight can lead to unauthorized access and exploitation of the system by allowing malicious files to be uploaded, posing risks to website integrity and user data.

Affected Version(s)

Membership Pro extension for Joomla 1.0-4.6.1

References

https://joomdonation.com/joomla-extensions/membership-pro...

product

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 21, 2026
Vulnerability Reserved
Jul 14, 2026

CVE-2026-62415 Data

JSON