grthtrhthjhtyjytjytkergtrhtrjytjerhrfh4:24 29/09/2026Return-Path: <0107019f444b837e-bac6f2f1-cac1-48eb-a5b3-d292f6f61322-000000@bounce.htprotect.org>
Envelope-to: contact@zoe-uruguay.com
Delivery-date: Wed, 08 Jul 2026 21:34:30 -0300
From: =?UTF-8?B?UGFzY2FsIExvaG1hbm4=?= <mail@htprotect.org>
To: contact@zoe-uruguay.com
Subject: Security notice for zoe-uruguay.com - Helix3 (2.5.6)
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="b_4a8a84088cb899407d226f86"
Message-ID: <0107019f444b837e-bac6f2f1-cac1-48eb-a5b3-d292f6f61322-000000@eu-central-1.amazonses.com>
Date: Thu, 9 Jul 2026 00:33:47 +0000
Feedback-ID: ::1.eu-central-1.J86VvqOz5u0BiZ7LOv6SkNP3m8bOKKw/pfYgZHZqJgk=:AmazonSES

--b_4a8a84088cb899407d226f86
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hello,=0A=0Aquick note, and no marketing - this is a free security notice a=
bout zoe-uruguay.com, and I'm not trying to sell you anything.=0A=0AI run H=
TProtect.org, a free security project around Joomla. During a passive check=
 of publicly available information - without any access to your website - I=
 noticed that zoe-uruguay.com uses the Joomla template framework Helix3 ver=
sion 2.5.6.=0A=0AA critical vulnerability has been disclosed for Helix3: in=
 all versions before 3.1.1, several actions can be triggered without a logi=
n - including writing and deleting files. Such flaws are usually found by a=
utomated scans very quickly. An update to 3.1.1 or newer closes it in a few=
 clicks.=0A=0ACheck your version yourself: https://zoe-uruguay.com/plugins/=
system/helix3/helix3.xml=0ABackground, update guide and possible impact: ht=
tps://htprotect.org/en/helix3=0A=0AIf an agency looks after your website, f=
eel free to forward this email - no reply needed.=0A=0AAs free extra protec=
tion I offer a free Joomla security extension via HTProtect.org: it hardens=
 the Joomla base directory via .htaccess, keeps adapting to new attack patt=
erns through a live feed, and can optionally install security updates for e=
xtensions automatically. It's meant as a contribution to make the Joomla ec=
osystem a little safer for everyone: https://htprotect.org/en=0A=0AKind reg=
ards=0APascal Lohmann=0AHTProtect.org=0A=0A--=0A=0AHTProtect.org=0APlitscha=
rder Str. 62=0A52134 Herzogenrath (Aachen)=0A=0ANot interested? Unsubscribe=
 here: https://website-bereinigung.de/unsubscribe?token=3Dd8a79fefe4b5e14df=
48ddbad7671d5dedc6c53d1e68848cd85274d6f1ed20ec4&lang=3Den=0A

--b_4a8a84088cb899407d226f86
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html><html><head><meta charset=3D"utf-8"></head><body style=3D"fo=
nt-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;fon=
t-size:14px;line-height:1.6;color:#333;max-width:600px;margin:0 auto;paddin=
g:20px"><div>Hello,<br />=0A<br />=0Aquick note, and no marketing - this is=
 a free security notice about zoe-uruguay.com, and I&#039;m not trying to s=
ell you anything.<br />=0A<br />=0AI run HTProtect.org, a free security pro=
ject around Joomla. During a passive check of publicly available informatio=
n - without any access to your website - I noticed that zoe-uruguay.com use=
s the Joomla template framework Helix3 version 2.5.6.<br />=0A<br />=0AA cr=
itical vulnerability has been disclosed for Helix3: in all versions before =
3.1.1, several actions can be triggered without a login - including writing=
 and deleting files. Such flaws are usually found by automated scans very q=
uickly. An update to 3.1.1 or newer closes it in a few clicks.<br />=0A<br =
/>=0ACheck your version yourself: <a href=3D"https://zoe-uruguay.com/plugin=
s/system/helix3/helix3.xml" style=3D"color:#1a73e8">https://zoe-uruguay.com=
/plugins/system/helix3/helix3.xml</a><br />=0ABackground, update guide and =
possible impact: <a href=3D"https://htprotect.org/en/helix3" style=3D"color=
:#1a73e8">https://htprotect.org/en/helix3</a><br />=0A<br />=0AIf an agency=
 looks after your website, feel free to forward this email - no reply neede=
d.<br />=0A<br />=0AAs free extra protection I offer a <strong>free Joomla =
security extension</strong> via HTProtect.org: it hardens the Joomla base d=
irectory via .htaccess, keeps adapting to new attack patterns through a liv=
e feed, and can optionally install security updates for extensions automati=
cally. It&#039;s meant as a contribution to make the Joomla ecosystem a lit=
tle safer for everyone: <a href=3D"https://htprotect.org/en/#htprotect" sty=
le=3D"color:#1a73e8">https://htprotect.org/en</a><br />=0A<br />=0AKind reg=
ards<br />=0APascal Lohmann<br />=0AHTProtect.org<br />=0A</div><div style=
=3D"margin-top:24px;padding-top:16px;border-top:1px solid #ddd;font-size:13=
px;color:#666"><strong><a href=3D"https://htprotect.org" style=3D"color:#33=
3;text-decoration:none">HTProtect.org</a></strong><br>Plitscharder Str. 62<=
br>52134 Herzogenrath (Aachen)</div><div style=3D"margin-top:24px;font-size=
:11px;color:#999;text-align:center">Already on top of it, or not interested=
? No problem - <a href=3D"https://website-bereinigung.de/unsubscribe?token=
=3Dd8a79fefe4b5e14df48ddbad7671d5dedc6c53d1e68848cd85274d6f1ed20ec4&amp;lan=
g=3Den" style=3D"color:#999">unsubscribe here</a>.