CVE-2026-58149

The Events Booking extension for Joomla versions prior to 5.8.0 is susceptible to an unauthenticated user enumeration vulnerability, enabling attackers to extract usernames and email addresses of accounts. This exposure can facilitate targeted attacks, such as phishing or credential stuffing. Joomla site administrators using this extension should prioritize patching to mitigate the risk of user data compromise.