CVE-2016-8870

CVE-2016-8870 is a critical vulnerability affecting Joomla! versions prior to 3.6.4, where a flaw in the user registration process allows remote attackers to create user accounts even when registration is disabled. This vulnerability carries a CVSS v3 score of 8.1 (High), indicating a severe risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts. Exploit intelligence confirms active exploitation with publicly available Metasploit modules and ExploitDB entries, alongside significant community discussion and media coverage, highlighting its widespread impact and active threat status.