The SEM Post

Latest News About SEO, SEM, PPC & Search Engines

You are here: Home / Security / Another Major Joomla Zero Day Exploit, Update Required

Another Major Joomla Zero Day Exploit, Update Required

at PST By

joomla exploit 2If you use Joomla, there is yet another critical vulnerability and this one is racing through the wild.  An immediate update is required for all versions of Joomla.

According to Sucuri, they began noticing the exploit on December 12th, and it has been running wild through Joomla sites.  They noted yesterday that “the wave of attacks is even bigger, with basically every site and honeypot we have being attacked. That means that probably every other Joomla site out there is being targeted as well.”

joomla exloit 2For those using Joomla 3.x, there is a patch now available.  The version that patches this exploit is version 3.4.6.  However, with how widespread this attack is, it is likely many Joomla installs were exploited during the two days prior to the patch becoming available.

This is the second major vulnerability found in Joomla in the last few months.  In October, there was a SQL injection vulnerability that was so significant, Joomla preannounced that a patch would be available to fix it.

The following two tabs change content below.
My Twitter profileMy Facebook profileMy Google+ profileMy LinkedIn profile

Jennifer Slegg

Founder & Editor at The SEM Post
Jennifer Slegg is a longtime speaker and expert in search engine marketing, working in the industry for almost 20 years. When she isn't sitting at her desk writing and working, she can be found grabbing a latte at her local Starbucks or planning her next trip to Disneyland. She regularly speaks at Pubcon, SMX, State of Search, Brighton SEO and more, and has been presenting at conferences for over a decade.

Sign up for our newsletter