
Joomla 4.4.13 security release
On Tuesday, April 8, 2025, Joomla 4.4.13 was released. This is a security release that fixes a security issue in Joomla 5.x related to the Multi-Factor Authentication (MFA).
Fixed security issue
This security update fixes two security issues in Joomla:
- [20250401] - Framework - SQL injection vulnerability in quoteNameStr method of Database package
- [20250402] - Core - MFA Authentication Bypass
The update fixes a security problem with missing checks that could lead to a way to skip the two-step verification. It also fixes an issue with the quoteNameStr database package.
No other improvements have been added to Joomla 4.4. This version is no longer being developed, and since October 2024, only security updates are being released for the Joomla 4 series. Joomla 4.4 will be supported with security patches until October 14, 2025.
However, upgrading from version 4.4.x to Joomla 5.x is easy and not a complicated migration. Most extensions will continue to work if you enable the "Backward Compatibility" plugin.
Need help updating or migrating to Joomla 5? Contact us.