CVE-2026-62415 | The Joomla extension Membership Pro prior version 4.6.2 did …

Description

The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets.

CVE ID: CVE-2026-62415
State: PUBLISHED
Assigner: Joomla
Reserved: 2026-07-14 05:16 UTC
Published: 2026-07-21 09:19 UTC
Last updated: 2026-07-21 09:19 UTC
Primary CWE: CWE-1188
CWE-1188: Initialization of a Resource with an Insecure Defa…
Vendor / Product: joomdonation.com / Membership Pro extension for Joomla
Sources: cve.org · NVD

No CVSS data available.

Affected products (1)

Vendor	Product	Platform	Versions
joomdonation.com	Membership Pro extension for Joomla	—	1.0-4.6.1

Weakness (CWE)

CWE	Source	Description
CWE-1188	cna	CWE-1188: Initialization of a Resource with an Insecure Default

References (1)