Brand
Widget Factory (JCE): actively exploited vulnerabilities
1 vulnerability in a Widget Factory (JCE) product (JCE (Joomla Content Editor)) is in CISA’s catalog of exploited vulnerabilities. It was added on June 16, 2026.
-
1 vulnerability added in the last 12 months
-
1 exploited vulnerability in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Widget Factory (JCE) category to your radar, or open its page.
- CMS, e-commerce and websites 1 vulnerability
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- JCE (Joomla Content Editor)1 vulnerability, CMS and websites
Name used by CISA: Widget Factory. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Widget Factory (JCE) list.
- Rank 1
Widget Factory (JCE) JCE (Joomla Content Editor)CVE-2026-48907
Widget Factory Joomla Content Editor Improper Access Control Vulnerability
CVSS severity 9.8critical
Added Jun 16, 2026
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.