27/08/2026
๐ ๐๐ฆ๐ฉ๐จ๐ซ๐ญ๐๐ง๐ญ ๐๐๐๐ฎ๐ซ๐ข๐ญ๐ฒ ๐๐ฉ๐๐๐ญ๐: ๐๐๐ฅ๐ข๐ฑ ๐๐ฅ๐ญ๐ข๐ฆ๐๐ญ๐ ๐ฏ๐.๐.๐๐ ๐ข๐ฌ ๐ง๐จ๐ฐ ๐ฅ๐ข๐ฏ๐!
We've released a security update for Helix Ultimate that patches
several vulnerabilities across the framework. If you're running Helix Ultimate on your site, we strongly recommend updating as soon as possible.
What's fixed:
โ
Stronger validation and permission handling for media uploads
โ
Improved authorization checks on AJAX actions
โ
Mega Menu vulnerabilities patched (settings & layouts)
โ
Hardened validation for page titles, styling, and attributes
โ
Better security for social sharing and video/audio embeds
โ
Tighter access control on Live Preview, Coming Soon, and other
protected features
These fixes apply across Joomla 3, 4, 5, and 6, but the update path is different depending on your version:
๐ Joomla 4, 5, 6 users: Update directly from your admin panel
System โ Update โ Extensions and choose Helix Ultimate.
๐ Joomla 3 users: You'll need the separate Helix Ultimate Joomla 3 security patch, available on GitHub. Download the patch and Install it via
System โ Install โ Extensions.
Check comments to get the Github link to the Joomla 3 security patch ๐