https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-19455.htmlhttps://patchthecve.com/cve/CVE-2020-19455.htmlWed, 17 Jun 2026 02:59:46 +0000HIGH 7.5: SQL injection exists in the jdownloads 3.2.63 component for Joomla! via components/com_jdownloads/helpers/categories.php, order function via the filter_order parameter.https://patchthecve.com/cve/CVE-2020-19451.htmlhttps://patchthecve.com/cve/CVE-2020-19451.htmlWed, 17 Jun 2026 02:59:46 +0000HIGH 7.5: SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter.https://patchthecve.com/cve/CVE-2020-19450.htmlhttps://patchthecve.com/cve/CVE-2020-19450.htmlWed, 17 Jun 2026 02:59:46 +0000HIGH 7.5: SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter.https://patchthecve.com/cve/CVE-2020-19447.htmlhttps://patchthecve.com/cve/CVE-2020-19447.htmlWed, 17 Jun 2026 02:59:46 +0000HIGH 7.5: SQL injection exists in the jdownloads 3.2.63 component for Joomla! com_jdownloads/models/send.php via the f_marked_files_id parameter.https://patchthecve.com/cve/CVE-2018-10068.htmlhttps://patchthecve.com/cve/CVE-2018-10068.htmlWed, 17 Jun 2026 01:33:26 +0000MEDIUM 6.1: The jDownloads extension before 3.2.59 for Joomla! has XSS.