Anton Majoroff here. Few people could have failed to notice the increased hacker activity targeting Joomla websites since the spring of 2026. Why have websites suddenly become frequent targets, and how long will this continue? Is Joomla the only platform affected, or are others suffering as well? What should you do to prevent your website from being hacked again? Let’s take a closer look.
Important information for Joomla 3 site owners! On July 15, 2026, JoomShaper developers released long-awaited security patches for Helix Ultimate, Helix 3, and SP Page Builder, specifically for Joomla 3 sites.
Important information for site owners with custom overrides! After the release of Joomla 5.4.7 and 6.1.2, some site owners encountered a problem — article layout overrides (article_layout) specified in article parameters stopped working.
Important information for all Joomla website owners! On July 9, 2026, a critical vulnerability was discovered in the popular AcyMailing (com_acym) email newsletter component. The vulnerability allows an unauthenticated attacker to execute arbitrary SQL queries against the site database, leading to the exposure of confidential data.
Important information for all Joomla website owners! On July 8, 2026, a critical vulnerability was discovered in the popular Balbooa Forms (com_baforms) form builder component. The vulnerability allows an unauthenticated attacker to upload and execute PHP files on the server, leading to full site compromise.
Important information for all Joomla website owners! On July 7, 2026, JoomShaper developers released an update for the popular Helix Ultimate template (version 2.2.7), which addresses a range of critical vulnerabilities. These include Open Redirect, Cross-Site Request Forgery (CSRF), Cross-Site Scripting (XSS), and unauthorized modification of site settings.
Important information for all Joomla! website owners: On June 29, 2026, JoomShaper released an update for the Helix 3 framework (version 3.1.1) that patches several critical vulnerabilities. These issues allow an attacker to delete files on your server without authorization, overwrite template settings, and inject malicious code.
Attackers are actively targeting Joomla sites using this vulnerability. Immediately update SP Page Builder to version 6.6.2 and check your administrator user list for suspicious accounts.
Important information for all Joomla website owners! In early June 2026, security researchers discovered a critical vulnerability in the popular JCE (Joomla Content Editor).
Important information for all Joomla! site owners. Since the beginning of April 2026, increased hacker activity has been observed: someone is successfully hacking sites that have not been updated for a long time.
