CVE-2018-14592

CRITICAL 9.8CVE-2018-14592 · Published 20/09/2018 · updated 17/06/2026

In short

CVE-2018-14592 is a CRITICAL (CVSS 9.8) vulnerability affecting cw article attachments free (cwjoomla), cw article attachments pro (cwjoomla).
Chance of exploitation in the next 30 days (EPSS): 3.1%, higher than 87.8% of all vulnerabilities.
Fix: update to 1.0.6, 2.0.7 or later.

Package	Affected versions	Patched versions
cw article attachments free cwjoomla	`< 1.0.6`	`1.0.6`
cw article attachments pro cwjoomla	`< 2.0.7`	`2.0.7`

Description

The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 for Joomla! allow SQL Injection within download.php.

References

cwjoomla.com/download-cw-article-attachments · Vendor Advisory
exploit-db.com/exploits/45447 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free