Websites using the Joomla CMS have been under sustained attack thanks to a nasty pair of vulnerabilities disclosed last week

via Critical vulnerabilities pose a serious threat to Joomla sites — Naked Security