CVE-2010-1607: Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface (aka WMI or com_wmi) co...

Security readout for executives and security teams

CVE-2010-1607 affects the Webmoney Web Merchant Interface component for Joomla. A remote attacker could abuse directory traversal in a request parameter to make the site include and execute local files. This is potentially serious for any exposed Joomla site still running the old component, but the supplied sources do not provide CVSS scoring or current exploitation evidence. Exposure is most likely limited to Joomla installations with Webmoney Web Merchant Interface, also called WMI or com_wmi, version 1.5.0 installed and reachable from the internet. The supplied affected-product metadata is incomplete and lists no CPEs, so inventory confirmation is required. Prioritize assessment if the organization still operates legacy Joomla commerce sites. The business risk is highest where this payment-related component is internet-facing. If the component is absent, no direct exposure is indicated by the supplied sources. Mitigation focus: Identify Joomla sites using Webmoney WMI/com_wmi before prioritizing remediation.; Check vendor and advisory guidance for a fixed version or official removal advice.; Disable or remove the component where it is not business-critical..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.