JCE Pro - Joomla WYSIWYG Editor 2.9.99.1

[IceMan053]

I am running it on Joomla v6.1.0 with YOOtheme ZOO without any problems. Regards.

 

[BloodyBakala]

anyone has the extra pro extension withJCE PRO, called:

Aia - Ai Assistant
or​

Responsify
?​

thanks

JCE Pro

JCE - A Content Editor for Joomla!®

www.joomlacontenteditor.net

​

 

[ArSi]

JCE Editor 2.9.99.2​

22 April 2026

Added​

• Support for a : prefix on the Media Field mediafolder value to match directly against a configured File Directory Path entry, allowing access to any designated directory store. If no matching entry is found, the path falls back to relative behaviour.

Fixed​

• Fixed an issue where relative image paths in content could trigger spurious resource requests during attribute processing, causing 404 errors and server timeouts on subdomain installations.
• Clicking at the start of anchor text, or moving the cursor to the start or end of link text, now correctly keeps the cursor inside the anchor for editing. Using Left/Right Arrow at the boundary moves the cursor out of the link as expected.
• Preserve {shortcode} within attribute values when Protect Shortcode is enabled.
• The editor no longer had a default height in Joomla 6.1. The default height has been reset to 500px.
• Smart quote shortcut failing for single quotes on non-US keyboards and macOS.
• Empty <span> tags without attributes were not being removed when pasting content from Word/Office.
• Modal container height now correctly fills fixed-height dialogs while remaining height: auto for standard dialogs.
• Clicking anywhere on the page when the Images & Links tab is active would open the JCE File Browser in Joomla 3.10

 

[Dano627775]

anyone has the extra pro extension withJCE PRO, called:

Aia - Ai Assistant​

or​

Responsify​

?​

thanks​

JCE Pro

JCE - A Content Editor for Joomla!®

www.joomlacontenteditor.net

​

Here these 2 plugins for JCE

 

[BloodyBakala]

Here these 2 plugins for JCE

thanks, but do you have the latest Aia - Ai Assistant 2.2.0 for JCE? thanks
and for the Responsify, the version here is 2.1.3 , do you have Responsify 2.1.5 ?
thanks

 

[Dano627775]

Aia - Ai Assistant​

Version	2.2.0
Released On	01 December 2025
Updated On	24 February 2026
File Size	59.77 Kb
MD5 Signature	919d6f0f254448573829f3fc07844014
Licence	GNU General Public License, Version 2 or later

Leverage advanced AI models from OpenAI ChatGPT, Google Gemini, and Anthropic Claude to produce dynamic new content or refine existing material.
Aia – AI Assistant supercharges the editor by integrating cutting-edge AI capabilities from multiple providers. Enjoy an enhanced editing experience that blends the power of machine learning with human creativity and editorial control.

Post automatically merged: Apr 25, 2026

thanks, but do you have the latest Aia - Ai Assistant 2.2.0 for JCE? thanks
and for the Responsify, the version here is 2.1.3 , do you have Responsify 2.1.5 ?
thanks

Responsify​

Version	2.1.5
Released On	13 June 2024
Updated On	03 March 2026
File Size	38.04 Kb
MD5 Signature	215d9066b329139fa4bcd2ec41d53542
Licence	GNU General Public License, Version 2 or later

Responsify is a powerful Joomla plugin designed to ensure that various media elements, including objects, videos, audio files, and iframes (such as YouTube and Vimeo embeds), are fully responsive on the front-end of your website.
With its Full Width Display feature, Responsify automatically adjusts media to fit the entire width of the page, providing a seamless viewing experience across all devices.
Additionally, the Click to Play option enhances page performance by loading certain media, like iframes, only when the user clicks a placeholder, reducing unnecessary load times and improving user interaction. This also assists with GDPR compliance by preventing external media, such as YouTube videos, from automatically loading and executing scripts without user consent. Media content is only activated when visitors manually click to play, giving them control over the data processed by third-party services.
Responsify 2 includes powerful new configuration options for finer control over how media is processed.

• Elements allows you to specify which media elements, such as video, object, embed, and selected iframes, are processed by the plugin.
• The Media Location option lets you choose between local, remote, or both types of media for processing, with remote media including sources like YouTube.
• Iframe Media gives you control over which iframes are processed—whether all, allowed media types, or only specific URLs.
• Use Allowed Iframe Media to automatically responsify common media types such as YouTube, Vimeo, and SoundCloud
• Allowed URLs option lets you define additional URLs for processing or optionally the only URLs to process.
• URL Exclusions provides a way to exclude specific URLs from being processed.

 

[Dano627775]

JCE Editor​

2.9.99.3​

20 May 2026

Changed​

• Set minimum Joomla 4 version to 4.2+
• Set the minimum Upload Max Size value to 10240 Kb (10 MB)

Fixed​

• PRO Improved display of image thumbnails in the Image Manager Extended, File Browser etc. reducing simultaneous image requests
• PRO Inserting a Template Manager template item that contained variables would remove some variables and not display them in the generated dialog, eg: Image button.
• Improved anchor selection when applying styles: clicking within a link to position the cursor is now sufficient - no manual selection is required - and selections extending beyond either side of the link are automatically trimmed to the link boundary.
• Clicking within a link now highlights it with a colour distinct from the text selection colour, so link boundaries remain visible during a drag selection.
• Fixed an issue when inserting a table column into a table where rows are entirely covered by rowspans.
• Fixed removal of the audio autoplay attribute when switching an audio element to placeholder mode.
• Fix table merge row deletion, bulk cell update, and button states when clicking inside a table
• Audio options, eg: Autoplay, Loop etc. were not correctly updated when set in the Media Manager dialog.
• Refactored the editor-xtd button implementation to fix issues with some buttons in Joomla 5 & 6.
• Fixed Directory Filter allow-list matching - Paths sharing a parent segment with an allowed folder were incorrectly granted access. Filter values are relative to the configured File Directory Path (defaults to images).
• Fixed mb_basename / mb_dirname ignoring mbstring - An inverted condition caused both functions to always fall back to the locale-dependent basename / dirname, corrupting some multibyte filenames.
• Joomla 3: reset the folder value if no default directory is set in parameters. This fixes a bug where editing an existing Media Field value, eg: Intro Image, would not show the Folder List in the JCE File Browser.

 

[Dano627775]

JCE Editor​

2.9.99.4​

28 May 2026

• SECURITY Insufficient profile access validation in the file browser
• SECURITY Path traversal vulnerability in the file browser directory search action
• Closing the Search & Replace dialog would scroll to the top of the editor content.
• Fix modal scrolling on small screens
• The Pad Empty Table Cells option was not being applied.

 

[Dano627775]

2.9.99.5​

03 June 2026

Added​

• Added support for custom filesystem paths, eg: local-foo/bar in converted Joomla Media Fields.
  Added support for <blockquote> tags inside <figure> tags. A Figure can now be applied to an existing blockquote using the Figure item in the Format list.

Fixed​

• SECURITY Insufficient access controls permitted unauthenticated users to upload editor profiles.
• Add missing <main> element to the HTML schema.
• The editor would fail to load with a javascript error if Validate HTML was No and Table -> Pad empty cells was No.
• Table cell contents would be removed if the cell contained a non-breaking space followed by an HTML element.
• Profiles Import would always report 0 profiles imported.

 

[IceMan053]

2.9.99.5​

03 June 2026

Added​

• Added support for custom filesystem paths, eg: local-foo/bar in converted Joomla Media Fields.
  Added support for <blockquote> tags inside <figure> tags. A Figure can now be applied to an existing blockquote using the Figure item in the Format list.

Fixed​

• SECURITY Insufficient access controls permitted unauthenticated users to upload editor profiles.
• Add missing <main> element to the HTML schema.
• The editor would fail to load with a javascript error if Validate HTML was No and Table -> Pad empty cells was No.
• Table cell contents would be removed if the cell contained a non-breaking space followed by an HTML element.
• Profiles Import would always report 0 profiles imported.

Thank you very much for this security update for this component, Regards

 

[Dano627775]

JCE Pro 2.9.99.6 released​

Created: 08 June 2026

Following on from last week's emergency update, I have spent the last 4 days conducting a comprehensive analysis and audit of the JCE extension, narrowing entry points, and hardening input validation.

This release is the result of that audit. It is a strongly recommended update for all sites.

I hope that this update and those to follow will go some way to retaining and reinforcing your trust and confidence in JCE.
Update fatigue is real. If you manage multiple sites you might consider services like BackupMonkey and MySites.guru, which assist in managing and updating multiple sites.

 

[Flugelche]

There is a new version of the program
JCE Pro 2.9.99.7

 

[chidalgo]

guys all sites with JCE Pro, below 2.9.99.7 are being hacked!!! It just happen and found that. must remove all weird named files you found in root folders (like x_.php or _t.php) and go to "Images" folder and delete al files that end with .php.gif or .php.png, etc. Finally uninstall JCE and install the JCE Pro 2.9.99.7 version.

 

[Dano627775]

JCE Editor​

2.9.99.7​

18 June 2026

• Add created/modified tracking fields to wf_profiles table
• Fix incorrect casing of UsergrouplistField class reference
• Publish "Default" profile on new install or profiles repair
• Further hardening of the upload pipeline.
• Added a Permitted User Groups whitelist option in the Component parameters. This restricts which groups are eligible for profile assignment. Groups outside the whitelist are excluded from matching and from profile import.
• Harden profile import against malformed and malicious files
• Allow for Joomla 3.9+ installation
• Fix content plugin install issue.
• Harden input validation and access control in browser and utility classes
• Add Enable File Browser parameter option to Table and Style plugins
• Fix mediatype filtering in browser plugin and add File Browser caller validation
• PRO Fix Image Editor saving error in Chromium browsers
• Restore optional configured access to the media folder
• Fix false positive PHP tag detection in binary image data
• Fix false positives in PHP tag scan and restricted directory check

 

[ArSi]

guys all sites with JCE Pro, below 2.9.99.7 are being hacked!!! It just happen and found that. must remove all weird named files you found in root folders (like x_.php or _t.php) and go to "Images" folder and delete al files that end with .php.gif or .php.png, etc. Finally uninstall JCE and install the JCE Pro 2.9.99.7 version.

Appreciate it!

Read more there JCE Official…

 

[Astron]

guys all sites with JCE Pro, below 2.9.99.7 are being hacked!!! It just happen and found that. must remove all weird named files you found in root folders (like x_.php or _t.php) and go to "Images" folder and delete al files that end with .php.gif or .php.png, etc. Finally uninstall JCE and install the JCE Pro 2.9.99.7 version.

There is also a security patch for older JCE versions that cannot be updated to JCE 2.9.99.6 or later.

Security Patch

JCE - A Content Editor for Joomla!®

www.joomlacontenteditor.net

Attacks are automated. As soon as the word was out that JCE had this vulnerability, there was a tsunami of those attacks.

 

[Dano627775]

You can use RSfirewall to protect your websites. This is the changelog of RSFirewall :​

16 Jun 2026
Version 3.3.8

• Added - Protection against iCagenda < 4.0.8 vulnerability.

09 Jun 2026
Version 3.3.7

• Added - Protection against SP Page Builder < 6.6.2 vulnerability.

04 Jun 2026
Version 3.3.6

• Updated - Further improvements for protections against JCE < 2.9.99.6 vulnerabilities.

15 Apr 2026
Version 3.3.5

• Added - Protection against JCE < 2.9.99.5 vulnerability.

 

[Dano627775]

2.9.99.8​

02 July 2026

• PRO Media Fields with a configured Directory (both custom JCE Media Fields and converted Joomla Media Fields) now open the File Browser restricted to that folder, while a field that already holds an image stored in another folder can still browse to it - previously the browser could be locked to the wrong folder (eg. the Banners image field could not reach the image root).
• PRO Editing an existing PDF embed using the File Manager would not update the relevant fields in the File Manager dialog.
• PRO Added Use Basic Dialog option to the Image Manager Extended.
• PRO The File Browser picker in a Template Manager custom Template Item would show an error in the opened dialog.
• Executable and active file types (php, js, exe, etc.) are never shown in the File Browser listing, even when present in a profile's allowed file types.
• The File Browser now lists files whose names contain characters such as &, $ and + that were previously hidden from the listing. These characters remain disallowed when uploading, creating, renaming, copying or moving files and folders.
• Allow some additional Unicode symbol characters (©, ®) in file names and skip items with invalid characters in browser listings instead of throwing an error.
• The File Browser breadcrumb now shows the directory label when a profile has more than one directory configured.
• The File Browser dialog opened from the Link dialog, Table dialog etc. would not display correctly if the Compress CSS or Compress Javascript options were enabled in the Editor Global Configuration.
• Deactivate event attributes (if permitted) in editor content, eg: clicking on an item in the editor that has an onclick event attached will not trigger the event.
• Improved the reliability of profile install, update and uninstall.

 

[lorus]

2.9.99.8​

02 July 2026

• PRO Media Fields with a configured Directory (both custom JCE Media Fields and converted Joomla Media Fields) now open the File Browser restricted to that folder, while a field that already holds an image stored in another folder can still browse to it - previously the browser could be locked to the wrong folder (eg. the Banners image field could not reach the image root).
• PRO Editing an existing PDF embed using the File Manager would not update the relevant fields in the File Manager dialog.
• PRO Added Use Basic Dialog option to the Image Manager Extended.
• PRO The File Browser picker in a Template Manager custom Template Item would show an error in the opened dialog.
• Executable and active file types (php, js, exe, etc.) are never shown in the File Browser listing, even when present in a profile's allowed file types.
• The File Browser now lists files whose names contain characters such as &, $ and + that were previously hidden from the listing. These characters remain disallowed when uploading, creating, renaming, copying or moving files and folders.
• Allow some additional Unicode symbol characters (©, ®) in file names and skip items with invalid characters in browser listings instead of throwing an error.
• The File Browser breadcrumb now shows the directory label when a profile has more than one directory configured.
• The File Browser dialog opened from the Link dialog, Table dialog etc. would not display correctly if the Compress CSS or Compress Javascript options were enabled in the Editor Global Configuration.
• Deactivate event attributes (if permitted) in editor content, eg: clicking on an item in the editor that has an onclick event attached will not trigger the event.
• Improved the reliability of profile install, update and uninstall.

Thanks Thanks Thanks Thanks Thanks Thanks