CVE-2026-77997
MediumCVSS 5.1Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
YOOtheme Pro for Joomla versions 1.0.0-5.0.41 has a missing access check, allowing users with com_template editing permissions to access information about arbitrary modules without the respective com_modules permissions. This is an information disclosure for authenticated, privileged users.
Risk Assessment
An authenticated user with limited privileges can access sensitive module information, violating the principle of least privilege and potentially enabling further attacks.
Recommendation
Upgrade YOOtheme Pro to a version later than 5.0.41 that includes the access control fix.
Other vulnerabilities in YOOtheme Pro
See all- CVE-2026-102785Critical
Joomla extension YOOtheme Pro versions 5.0.0–5.0.52 contains an unauthenticated remote code execution vulnerability. The publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature, allowing an attacker to reuse a signature from a legitimate public image URL, inject additional operations, traverse out of the cache directory, and write an attacker-controlled PNG/PHP polyglot to an executable public media directory.
- CVE-2026-77996High
Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a XSS vector.
- CVE-2026-76613High
YOOtheme Pro for Joomla versions 1.0.0-5.0.40 contains an SQL injection vulnerability that allows any contributor-level user to inject own content into SQL queries.
- CVE-2026-75115High
Joomla Extension - yootheme.com - YOOtheme Pro 2.3.0-5.0.40 has authenticated, privileged arbitrary file read. The Filesystem source's path filter is vulnerable to glob-based pattern attacks, allowing authorized users to read arbitrary files.
Original NVD description (English source)
Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with com_template editing permissions to access information about arbitrary modules without the respective com_modules permissions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS