CVE-2019-10946

An issue was discovered in Joomla! before 3.9.5. The "refresh list of helpsites" endpoint of com_users lacks access checks, allowing calls from unauthenticated users.

We have discovered 211,097 live websites that are affected by CVE-2019-10946.

Run a Free Instant Scan



Affected Software

Product  Joomla
Category Content Management System
Vulnerable Domains211,097 live websites (99% of Joomla install base)
Vulnerable Versions
  • from 0 through 3.9.5
Vulnerable Versions Count70 versions ( 68% of all versions)



Details

  • Published - Apr 10, 2019
  • Updated - Aug 4, 2024

Website Distribution by Country

Number of websites using CVE-2019-10946
United States10,527 websites


Italy56,247 websites
Russia15,639 websites
Poland15,364 websites
GB13,907 websites
Iran12,622 websites
Germany12,328 websites
Kazakhstan7,318 websites
Netherlands6,186 websites
South Africa5,927 websites

Website Distribution by TLD

Number of websites using CVE-2019-10946
.com51,188 websites
.it37,008 websites
.ru12,987 websites
.pl10,997 websites
.co.uk6,955 websites
.org5,248 websites
.de4,965 websites
.net4,240 websites
.nl3,678 websites
.se3,284 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2019-10946

Top websites that are affected by CVE-2019-10946. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****************.de Germany*,***
*******.**.ca Canada*,***
*****.com Italy**,***
***********.**.za South Africa**,***
**************.se Sweden**,***
***************.com Italy**,***
*********.com GB**,***
************.com United States**,***
************.com Germany**,***
*********************.com United States**,***
See full domain list

FAQ

A total of 211,097 websites have been identified as vulnerable to CVE-2019-10946, based on global website indexing conducted by WebTechSurvey.
The Joomla is affected by the CVE-2019-10946 vulnerability.
Joomla versions up to and including 3.9.5 are vulnerable to CVE-2019-10946.