Is my Joomla Site insecure?

Discussion regarding Joomla! 3.x security issues.

Moderators: mandville, General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10.
Post Reply
cepat
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Sat Apr 29, 2023 5:41 pm

Is my Joomla Site insecure?

Post by cepat » Sat Apr 29, 2023 5:49 pm

Yes, i'm experiencing suddenly there are new user inside my joomla with administrator access. I'm using cpanel server and using imunify360 but it seems my joomla 3 inscure. I'm thinking to upgrade from joomla 3 to 4 version.
Last edited by imanickam on Sat Apr 29, 2023 6:04 pm, edited 1 time in total.
Reason: Split from the topic https://forum.joomla.org/viewtopic.php?f=714&t=1000819. In the future, for your issue/question, please create a separate topic.

User avatar
toivo
Joomla! Master
Joomla! Master
Posts: 17439
Joined: Thu Feb 15, 2007 5:48 am
Location: Sydney, Australia

Re: Is my Joomla Site insecure?

Post by toivo » Sat Apr 29, 2023 10:20 pm

Welcome to the Joomla forum!

The security of the website depends on many factors, including the configuration of the server, if the third party extensions are uptodate and if the Joomla 3 CMS itself has been kept uptodate.

Please post the results from the Forum Post Assistant (FPA) by following the instructions at https://forumpostassistant.github.io/docs/ so that our volunteer Joomla and server experts can review the configuration.
Toivo Talikka, Global Moderator

User avatar
AMurray
Joomla! Exemplar
Joomla! Exemplar
Posts: 9739
Joined: Sat Feb 13, 2010 7:35 am
Location: Australia

Re: Is my Joomla Site insecure?

Post by AMurray » Sat Apr 29, 2023 11:37 pm

In the meantime, if you have concerns, try an audit/scan of your site with MySites.guru. It may find things that Immunify360 has let through or some other open-door (so to speak) that lets someone register with elevated privileges (just to be clear do you mean Administrator, or Super User - as there is a difference)

Upgrading to J4 may not solve the security issue if it is not found and as already suggested it may not be Joomla at fault, but a server config issue.
Regards - A Murray
General Support Moderator

User avatar
Webdongle
Joomla! Master
Joomla! Master
Posts: 44092
Joined: Sat Apr 05, 2008 9:58 pm

Re: Is my Joomla Site insecure?

Post by Webdongle » Sat Apr 29, 2023 11:44 pm

You will find instructions and download link for the fpa at https://forumpostassistant.github.io/docs/
http://www.weblinksonline.co.uk/
https://www.weblinksonline.co.uk/updating-joomla.html
"When I'm right no one remembers but when I'm wrong no one forgets".


Post Reply

Return to “Security in Joomla! 3.x”