
Joomla 4.4.12 security release
On Tuesday, March 11, 2025, Joomla 4.4.12 was released. This is a security release that fixes a security issue in Joomla 4.x related to the Media Manager.
Fixed security issue
This security update fixes one security issue in Joomla's Media Manager:
- [20250301] - Core - Malicious file uploads via Media Manager
Due to insufficient checks in the Media Manager, users logged into the back-end with "create" permissions could upload and create executable PHP files. This meant they could potentially upload and run harmful code.
No other improvements have been added to Joomla 4.4. This version is no longer being developed, and since October 2024, only security updates are being released for the Joomla 4 series. Joomla 4.4 will be supported with security patches until October 14, 2025.
However, upgrading from version 4.4.x to Joomla 5.x is easy and not a complicated migration. Most extensions will continue to work if you enable the "Backward Compatibility" plugin.
Need help updating or migrating to Joomla 5? Contact us.