CVE-2026-97161

The UP plugin extension for Joomla versions 5.0.0 to 5.2.0 and 6.0.0 to 6.0.29 is vulnerable to multiple path traversal and file access vulnerabilities, allowing attackers to access sensitive files on the server. This critical flaw, with a CVSS score of 9.2, poses a significant risk to any Joomla installations using the affected plugin, making it essential for administrators to prioritize immediate updates or mitigations. Organizations relying on this extension should urgently assess their systems to prevent potential exploitation.