JCE 2.9.99.5 security release

The JCE team has released JCE 2.9.99.5, an essential security update that should be installed without delay.

Last week, the JCE 2.9.99.4 security release addressed a critical vulnerability affecting both JCE Core and JCE Pro. However, another additional security issue was found that could allow unauthenticated users to upload editor profiles, potentially exposing websites to security risks. According to the JCE developers, all previous versions are vulnerable.

Update immediately

We strongly advise updating both JCE and JCE Pro to version 2.9.99.5 as soon as possible. We have already updated the websites of customers with an active Joomla maintenance contract to JCE version 2.9.99.5 so their websites are protected against these vulnerabilities.

Compatible with Joomla 3, 4, 5 and 6

Website owners across all supported Joomla versions can update with confidence. JCE Pro 2.9.99.5 is fully compatible with Joomla 3, Joomla 4, Joomla 5 and Joomla 6. Furthermore, it does not require the Backwards Compatibility plugin when running Joomla 5 or Joomla 6, simplifying both upgrades and ongoing maintenance.

If your website is still running an older version, now is the time to update.