Widget Factory Joomla Content Editor: CVE-2026-48907 is being actively exploited
A vulnerability, CVE-2026-48907, affects the Widget Factory Joomla Content Editor, allowing unauthenticated users to upload and execute PHP code through new editor profiles.