CVE-2026-77997

The YOOtheme Pro extension for Joomla is vulnerable due to a missing access check, allowing users with template editing permissions to access sensitive information about arbitrary modules without the necessary module permissions. This could lead to unauthorized information disclosure, potentially exposing critical data to users who should not have access. Joomla site administrators and developers using YOOtheme Pro should prioritize this vulnerability to mitigate the risk of data leaks.