P
Vendor security profile
phoca
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs1
Critical1
CISA KEV0
Public exploit1
Patch rate%0
Avg. CVSS9.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
1
0
0
0
CVE KEV
CVE severity distribution
1toplam CVE
Critical1 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%100
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
8.7
CVE-2026-102775
Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8
P
Patch status unknownEPSS %0
8.6
CVE-2026-76564
Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7
P
Patch status unknownEPSS %0
5.3
CVE-2026-76569
Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4
P
Patch status unknownEPSS %0
5.3
CVE-2026-76565
Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7
P
Patch status unknownEPSS %0
9.3
CVE-2026-74251
Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6
P
Patch status unknownEPSS %0
8.2
CVE-2026-66491
Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3
P
Patch status unknownEPSS %0
6.1
CVE-2026-66492
Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3
P
Patch status unknownEPSS %1
6.4
CVE-2026-66493
Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3
P
Patch status unknownEPSS %0
9.0
CVE-2026-57828
Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3
P
Patch status unknownEPSS %1