Let’s celebrate! The Joomla! Project is pleased to announce the release of Joomla 5.2.5 and Joomla 4.4.12. This is a security and bugfix release for the 5.x and 4.x series of Joomla.
These releases continue Joomla’s high standards in accessible web design, highlighting Joomla's values of inclusiveness, simplicity and security into an even more powerful open-source web platform.
Security Fix
The update fixes a security issue that allows users with “edit” permissions in the Media Manager component to upload malicious files, leading to a code execution vulnerability. By default, that permission is assigned to all backend user groups and frontend users with “Editor” or higher.
Bug fixes and Improvements with 5.2.5
-
- Fix set frontediting option from CLI after installation (#44978)
- Redesign carousel implementation to reflect documentation - bug fix (#44951)
- com_contact: Send Copy to Submitter does not work anymore (#44947)
- Disable compatibility plugin for system tests (#44944)
- Add border last element media breadcrumbs (#44937)
- PHP Deprecated: trim(): Passing null to parameter #1 ($string) of type string is deprecated (#44934)
- Set column alias for BannerTable, fix warning on Save As Copy (#44932)
- Translation Update (#44933)
The full list on GitHub is here: https://github.com/joomla/joomla-cms/milestone/139?closed=1
What’s shipped with 4.4.12?
Joomla 5 is the latest main version. No new features will be added in Joomla 4 and it will only receive security updates until October 14, 2025.
Where can I download Joomla 5.2.5?You can find all Joomla 5 downloads through the official downloads page at: https://downloads.joomla.org/cms/joomla5/
New Installations
New installation instructions and technical requirements
Upgrade
Would you like to make a tour of Joomla 5 without having to install it? We have a solution for you: Try Joomla 5.2.5 at launch.joomla.org.
Where can I download Joomla 4.4.12?
Upgrade
How can I upgrade my site to Joomla 5.2.5?
Good news for Joomla 4.4.x to 5.x, it’s an upgrade, not a migration. Why? Two main reasons:
- Joomla 4 (J4) extensions that have removed all deprecations of code and are using up-to date Joomla code, will work in Joomla 5 (J5)
- Most others will work with the new Behaviour - Backward Compatibility Plugin enabled
The full details are found here: https://docs.joomla.org/Joomla_4.4.x_to_5.x_Planning_and_Upgrade_Step_by_Step
Note: we advise you to first test the upgrade on a copy of your production site.
You may also wonder if you have to migrate ASAP. We’ll support Joomla 4.4 until 14 October 2025 with security patches. So your site is not at risk if you don’t upgrade now. And don’t forget that some of your extensions may not be yet ready for Joomla 5 (even though most developers have done a great job offering a Joomla 5 test version for a while. You can filter by version in the Joomla Extensions Directory so you can see which are ready for J5 and which are J5 ready with the b/c plugin enabled.
For known issues with the 4.4.12 release, see the Version 4.4.12 FAQ; for the 5.2.5 release, check the Version 5.2.5 FAQ in our documentation.
Who is Joomla! for?
Web agencies, large and small companies, online shops, bloggers, communities, and all kinds of organisations (for example, NGOs, schools, charities and governments) all use Joomla as their preferred CMS.
Joomla is written by committed volunteers. Many of those volunteers use it in their everyday web design, building and hosting. So, unlike many other systems, Joomla is built by those using it on a daily basis. That is reflected in its secure, robust nature.
Is there help for extension developers with Joomla 5?
Yes, a growing manual is aimed at those who code and maintain their extensions. The manual can be found at https://manual.joomla.org/migrations/51-52/ and is a growing work to help developers get ahead of any changes.
How can you help develop Joomla?
There are a variety of ways in which you can get actively involved with Joomla. It doesn't matter if you are a coder, an integrator, or a user of Joomla. You can join the community on Mattermost and look through the teams to join, or if you are ready, you can jump right into the Joomla! Bug Squad.
The Joomla! Bug Squad and the CMS Release Team are some of the most active teams in the CMS development process and are always looking for people (not just developers) who can help with sorting bug reports, coding patches and testing solutions. It is a great way to increase your working knowledge of the Joomla code base and also a great way to meet new people from all around the world.
You can also help Joomla development by thanking those involved in the many areas of the process. The Project also wants to thank all the contributors who have taken the time to prepare and submit work to be included in the Joomla CMS and Framework.
Where can I find documentation about Joomla 5?
There are some tutorials to help you with Joomla 4/5. You can find the existing ones, like creating a Plugin or a Module for Joomla 4/5, namespaces conventions, prepared statements, using the new web asset classes and many more in https://docs.joomla.org/Category:Joomla!_5.x
We encourage developers to help write the documentation about Joomla 5 on docs.joomla.org to help and guide users and other extension developers.
A JDocs page will help developers to see the existing documentation and the documentation still needed.
We invite you to check it regularly, update it and provide the missing content.
Related information
If you are an extension developer, please make sure you subscribe to the extension developer channel https://joomlacommunity.cloud.mattermost.com/main/channels/extension-development-room
Where you can join the community of extension developers.
A Huge Thank You to Our Volunteers!
Joomla 5.2.5 results from thousands of hours of work by dozens of volunteers.
A big thank you to everyone who contributed to Joomla 5.2.5!!
Big thanks to the Joomla CMS Maintainers Team and the Joomla Security Strike Team for their hard work.
A special mention to the Joomla 5.2 release managers: Hannes Papenberg and Peter Martin, who worked tirelessly to get this release out.
Full details are on GitHub
A huge shout out to our teams, who have done an amazing job. In particular, the CMS maintenance team, Joomla Security Strike Team, CMS release team, docs team and Marketing team all did their utmost to make this release happen.
Thank you all.
Translations
Dutch: Veiligheids en bug-fix release Joomla 5.2.5 en 4.4.12
French: https://www.joomla.fr/joomla/actualites-joomla/sortie-de-joomla-5-2-5-et-joomla-4-4-12.html
German: Joomla! 5.2.5 und 4.4.12 als Sicherheits- und Bugfix-Release veröffentlicht
Polish: Joomla 5.2.5. Wydanie zabezpieczeń i poprawek błędów
Russian: Вышли релизы безопасности Joomla 5.2.5 и Joomla 4.4.12