plg_system_sourcerer vulnerabilities

CVEs whose affected-version data names the plg_system_sourcerer package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-102802High· 8.9

6d ago

Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles Anywhere extension < 20.1.1

Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles Anywhere extension < 20.1.1 - Sourcerer can restrict PHP in articles according to article-author trust; the exact crea…

▾ Twilightregularlabs.com · plg_system_sourcererEPSS 0.39%via CVEORG