Recent posts

#11

Administration & Configuration / Re: Product images ordering n...

Last post by p.barg - September 17, 2026, 12:29:33 PM

I can confirm this bug.

#12

3rd party extension / Re: Multipurpose Responsive Vi...

Last post by waqar@wimoffroad.com - September 17, 2026, 02:04:23 AM

Hi Jumbo,

I'm in trouble and need your help. I'm currently using the VirtuePlanet Smart Template with VirtueMart 4.4.4 on Joomla 4.

My problem is with the category URL structure. I have created a main menu item and several sub-menu items, and I have linked my VirtueMart categories to these menu items.

However, the problem is that Joomla/VirtueMart is adding the entire menu/category hierarchy to the URL.

For example, my current URL is:

https://www.wimoffroad.com/online/wheels/atv-utv-wheel-brands/msa-atv-utv-wheels.html

Instead, I want the URL to be:

https://www.wimoffroad.com/online/msa-atv-utv-wheels.html

For this reason, I would like to link my VirtueMart categories directly to one main menu item without including all the parent menu/category names in the URL.

Is there a way to achieve this in VirtueMart 4.4.4 with the VirtuePlanet Smart Template and Joomla 4? Or is there another recommended solution?

Basically, what I want is for the URL to show only the final/active category name and the final product name, rather than the entire category hierarchy.

Please let me know the correct settings or configuration I should use.

Thank you.

#13

General Questions / Separate prices for countries ...

Last post by ukfish1 - September 15, 2026, 16:04:08 PM

Hi

Virtuemart 3.4.0

We only offer deliveries to the UK (England, Wales, Scotland and Northern Ireland) but need to be able to set a separate shipping rate for England, Scotland and Wales and one for Northern Ireland.

Is this possible ion this old version of VM.

I believe it is possible to use States rather than Countries but can't seem to find how to enable this.

Thanks

Paul

#14

Security (https) / Performance / SEO, SEF, URLs / Re: Critical unauthenticated R...

Last post by Ghost - September 15, 2026, 07:58:28 AM

OP already said it's not yet fixed. Besides RCE is much more serious than missing CSRF tokens. This could be another Sourcerer/Helix/JCE type disaster if not fixed ASAP.

#15

3rd party extension / Re: Responsive Joomla 5 and J...

Last post by Jumbo! - September 15, 2026, 02:09:17 AM

That's great. Thank you for the update.

#16

General Questions / Re: Is VM 4.x in a good state?...

Last post by PRO - September 14, 2026, 17:31:18 PM

I have been using it for a long time.

Install a test domain and work through any changes you need.

#17

Security (https) / Performance / SEO, SEF, URLs / Re: Critical unauthenticated R...

Last post by PRO - September 14, 2026, 17:27:53 PM

this one?

Token validation

    Token checks added to backend controllers and frontend forms. Unauthorized form submissions are now rejected.

#18

Security (https) / Performance / SEO, SEF, URLs / Re: Critical unauthenticated R...

Last post by d0ublezer0 - September 12, 2026, 23:09:36 PM

Thanks for the reply.

I can confirm the security issue I reported privately is still present in the latest release, 4.8.2 (build 11343) — it is not fixed there.

I won't post any specifics here, since this is a public thread and the issue is serious. I have the full details, a proof of concept and supporting evidence ready to share privately.

Before I send them, I need to be sure I'm sending to an actual member of the core development team. Could you confirm your affiliation in whatever way you consider appropriate? Once I can verify it, I'll send everything straight away.

Thanks for handling this responsibly.

#19

Security (https) / Performance / SEO, SEF, URLs / Re: Critical unauthenticated R...

Last post by Ghost - September 10, 2026, 10:29:43 AM

Is this issue still present in 4.8.2.11343? And have you tried contacting on "Discord" (https://forum.virtuemart.net/index.php?board=142.0)? It's the main communication platform for VM development now.

#20

Security (https) / Performance / SEO, SEF, URLs / Re: Critical unauthenticated R...

Last post by sirius - September 09, 2026, 22:35:06 PM

Hi the 4.6.4 is very old now
https://virtuemart.net/news/list-all-blogs
you should go for 4.8

You can pm me if you want