Security News CISA orders feds to patch max severity Joomla plugin flaw by Friday BleepingComputer Daniel Bender 17 Jun 2026 Share The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch a maximum-severity flaw in the Widget Factory Joomla Content Editor (JCE) plugin that is being actively exploited in the wild.