P
Vendor security profile
phoca.cz
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical2
CISA KEV0
Public exploit8
Patch rate%0
Avg. CVSS7.4
12-month vulnerability rate
0
0
0
0
0
0
0
0
1
7
0
1
CVE KEV
CVE severity distribution
9toplam CVE
Critical2 (22%)
High3 (33%)
Medium4 (44%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%89
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
9Unknown
Latest vulnerabilities
8.7
CVE-2026-102775
Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8
P
Patch status unknownEPSS %0
8.6
CVE-2026-76564
Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7
P
Patch status unknown Public Exploits:1EPSS %0
5.3
CVE-2026-76569
Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4
P
Patch status unknown Public Exploits:1EPSS %0
5.3
CVE-2026-76565
Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7
P
Patch status unknown Public Exploits:1EPSS %0
9.3
CVE-2026-74251
Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6
P
Patch status unknown Public Exploits:1EPSS %0
8.2
CVE-2026-66491
Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3
P
Patch status unknown Public Exploits:1EPSS %0
6.1
CVE-2026-66492
Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3
P
Patch status unknown Public Exploits:1EPSS %1
6.4
CVE-2026-66493
Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3
P
Patch status unknown Public Exploits:1EPSS %0
9.0
CVE-2026-57828
Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3
P
Patch status unknownEPSS %1