Bypass all resource restrictions, passwords, and keys? Read here!
Decryption key:
JCE Pro - Joomla WYSIWYG Editor v2.9.99.10
2.9.99.10
29 July 2026
SECURITY Fixed an issue where an authenticated, privileged user could rename a file in a way that created a hidden file in the folder they were browsing.
This release also includes a number of smaller security and stability improvements across the file system and editor.
PRO Resize sets in Editor Profiles → Editor Parameters → Filesystem can now be switched on or off individually with a new Enable option.
PRO Images saved with the Image Manager Extended no longer keep the temporary "cache-buster" timestamp in their file name.
PRO Saving a template in the Template Manager no longer fails with an "empty content" message, and templates that contain % characters are no longer saved incorrectly.
PRO Saving a file in the Text or Image editor no longer fails with an "empty content" message, and the content is now kept exactly as it was.
PRO Removed unused thumbnail caching.
The Upload Add Random option in Editor Profiles → Editor Parameters → Filesystem now includes a choice to give uploaded files a completely random name.
On new installations, the default Editor Profile no longer includes the Author user group, with the lowest user group now set to Editor.
Optimised loading of Editor Profiles.
Clicking an item in the context menu (right-click menu) would sometimes have no effect. This has been fixed.
Using the Paste button in the context menu would sometimes have no effect. This has been fixed.
SVG and HTML files can now be deleted and renamed when the file type is allowed in the profile.
Files with a % character in their name are no longer shown in file listings, as this character can cause display problems.
Fixed a problem where the selection tick-box could not be used when a folder contained only one item.
Fixed a display problem where a menu could extend beyond the edge of its container.
Decryption key:
JCE Pro - Joomla WYSIWYG Editor v2.9.99.9
= 2.9.99.9
08 July 2026
- Fixed an issue where RPC requests were blocked by Cloudflare OWASP managed rules and Imunify WAF as false-positives.
- Fixed an issue where file and folder names containing apostrophes and other valid URL characters were incorrectly rejected for file listing.
Decryption key:
JCE Pro - Joomla WYSIWYG Editor v2.9.99.8
= 2.9.99.8
02 July 2026
- PRO Media Fields with a configured Directory (both custom JCE Media Fields and converted Joomla Media Fields) now open the File Browser restricted to that folder, while a field that already holds an image stored in another folder can still browse to it - previously the browser could be locked to the wrong folder (eg. the Banners image field could not reach the image root).
- PRO Editing an existing PDF embed using the File Manager would not update the relevant fields in the File Manager dialog.
- PRO Added Use Basic Dialog option to the Image Manager Extended.
- PRO The File Browser picker in a Template Manager custom Template Item would show an error in the opened dialog.
- Executable and active file types (php, js, exe, etc.) are never shown in the File Browser listing, even when present in a profile's allowed file types.
- The File Browser now lists files whose names contain characters such as &, $ and + that were previously hidden from the listing. These characters remain disallowed when uploading, creating, renaming, copying or moving files and folders.
- Allow some additional Unicode symbol characters (©, ®) in file names and skip items with invalid characters in browser listings instead of throwing an error.
- The File Browser breadcrumb now shows the directory label when a profile has more than one directory configured.
- The File Browser dialog opened from the Link dialog, Table dialog etc. would not display correctly if the Compress CSS or Compress Javascript options were enabled in the Editor Global Configuration.
- Deactivate event attributes (if permitted) in editor content, eg: clicking on an item in the editor that has an onclick event attached will not trigger the event.
- Improved the reliability of profile install, update and uninstall.
Decryption key:
JCE Pro - Joomla WYSIWYG Editor v2.9.99.3
2.9.99.3
20 May 2026
Changed
Fixed
- Set minimum Joomla 4 version to 4.2+
- Set the minimum Upload Max Size value to 10240 Kb (10 MB)
- PRO Improved display of image thumbnails in the Image Manager Extended, File Browser etc. reducing simultaneous image requests
- PRO Inserting a Template Manager template item that contained variables would remove some variables and not display them in the generated dialog, eg: Image button.
- Improved anchor selection when applying styles: clicking within a link to position the cursor is now sufficient - no manual selection is required - and selections extending beyond either side of the link are automatically trimmed to the link boundary.
- Clicking within a link now highlights it with a colour distinct from the text selection colour, so link boundaries remain visible during a drag selection.
- Fixed an issue when inserting a table column into a table where rows are entirely covered by rowspans.
- Fixed removal of the audio autoplay attribute when switching an audio element to placeholder mode.
- Fix table merge row deletion, bulk cell update, and button states when clicking inside a table
- Audio options, eg: Autoplay, Loop etc. were not correctly updated when set in the Media Manager dialog.
- Refactored the editor-xtd button implementation to fix issues with some buttons in Joomla 5 & 6.
- Fixed Directory Filter allow-list matching - Paths sharing a parent segment with an allowed folder were incorrectly granted access. Filter values are relative to the configured File Directory Path (defaults to images).
- Fixed mb_basename / mb_dirname ignoring mbstring - An inverted condition caused both functions to always fall back to the locale-dependent basename / dirname, corrupting some multibyte filenames.
- Joomla 3: reset the folder value if no default directory is set in parameters. This fixes a bug where editing an existing Media Field value, eg: Intro Image, would not show the Folder List in the JCE File Browser.
Decryption key:
JCE Pro - Joomla WYSIWYG Editor v2.9.99.2
= 2.9.99.2
22 April 2026
Added
- Support for a : prefix on the Media Field mediafolder value to match directly against a configured File Directory Path entry, allowing access to any designated directory store. If no matching entry is found, the path falls back to relative behaviour.
Fixed
- Fixed an issue where relative image paths in content could trigger spurious resource requests during attribute processing, causing 404 errors and server timeouts on subdomain installations.
- Clicking at the start of anchor text, or moving the cursor to the start or end of link text, now correctly keeps the cursor inside the anchor for editing. Using Left/Right Arrow at the boundary moves the cursor out of the link as expected.
- Preserve {shortcode} within attribute values when Protect Shortcode is enabled.
- The editor no longer had a default height in Joomla 6.1. The default height has been reset to 500px.
- Smart quote shortcut failing for single quotes on non-US keyboards and macOS.
- Empty <span> tags without attributes were not being removed when pasting content from Word/Office.
- Modal container height now correctly fills fixed-height dialogs while remaining height: auto for standard dialogs.
- Clicking anywhere on the page when the Images & Links tab is active would open the JCE File Browser in Joomla 3.10
Decryption key:
JCE Pro - Joomla WYSIWYG Editor v2.9.99.1
2.9.99.1
30 March 2026
Fixed
Fix removal of ItemId and Alias on links generated by the Link dialog Link list.
Upload button on Media Fields in the Images & Links field blocked by Angular 1.x event handling injected by third-party extensions.
PRO Embedding a document (eg: PDF) via the File Manager using the "Open With" option caused the embed HTML to be stripped on insert.
Fixed an issue where Firefox 148 would display a native browser paste prompt when clicking the Paste button. The paste dialog is now used consistently across all browsers.
Where multipe Custom Sandbox Exclusions were assigned, only the first item would be applied.
Fixed a PostgreSQL installation error caused by a NOT NULL constraint on the checked_out column in the wf_profiles table.
Decryption key:
JCE Pro - Joomla WYSIWYG Editor v2.9.99
2.9.99
11 February 2026
Added
PRO A Template Items Limit option has been added to the Template Manager parameters, allowing you to control how many items are shown in the Template Items list (default: 25; set to 0 for no limit).
Added support for the <q> quotation element in the Reference plugin tools. You can now apply a <q> element (with an optional cite attribute) to selected text using the “” toolbar button, located between Citation and Abbreviation.
Added parameter options for the Autosave plugin.
Changed
Replaced the MobileDetect library with a lightweight internal device detection class for Editor Profile loading, resolving deprecated warnings under PHP 8.4.
Fixed
PRO Media inserted via the URL field in the Media Manager Quick Embed drop-down was not being properly processed before being inserted into the editor.
PRO Inserting iframe code that includes a reponsive container <div> using the Media Manager Embed Code dropdown will now retain the responsive container.
PRO Dailymotion embed code that already used a valid embed URL was being incorrectly processed.
PRO Improved HTML parsing for Template Manager inserts.
PRO Improved handling of <style> and <script> tags in Template Manager inserts, preventing unintended paragraph splitting.
Fixed an issue where repeatable attribute processing caused custom data-* attributes to be assigned to the wrong fields or not assigned at all
Some code elements, eg: shortcode, script, style etc. were splitting their container paragraph when converted to a Code Block.
Attribute options in the Image Manager and Image Manager Extended dialogs are now correctly shown when enabled. Previously, options that had been disabled could remain hidden even after being re-enabled.
Decryption key:
JCE Pro - Joomla WYSIWYG Editor v2.9.98
= JCE Editor PRO 2.9.98 (27 January 2026)
Added: The Image Manager Basic Dialog now includes an Upload button in the URL text box if the Allow Upload parameter is enabled in the Image Manager parameters.
It is now possible to hide the Classes list in Image Manager dialogs (including the Basic Dialog) by setting the Show Classes List parameter to No.
Decryption key:
JCE Pro - Joomla WYSIWYG Editor v2.9.96
13 November 2025
Fixed
PRO The File Directory Path field in the Link parameters was not rendering correctly.
PRO Boolean attributes were incorrectly added when updating an <audio> element.
PRO Context (component option, eg: com_content) was not passed through correctly for converted Media Fields.
Ignore www and protocol in Sandbox URL Exlusion values.
Minor fix for Font Awesome 2.0 javascript error.
The default "Home" itemid was not being removed from Article and Category links created in the Link dialog.
Improve validation of Supported Media in Media parameteres and allow for protocol relative urls in Custom URL values
Filter Startup Content HTML parameter value on saving and remove encoding on display
Some repeatable parameters, eg: Supported Media Custom URL were not rendered correctly
Fixed an issue with profile assignment when profiles are assigned to specific components.
Astroid framework compiled stylesheets were not loaded in the correct order.
The Preview tab was not showing correct Columns formatting in Joomla 6
Comma seperated mediatype values in custom fields was not correctly processed resulting in some file types not being displayed in the File Browser.
Renaming a file when using the Allow Root Access option with Directory Filters would produce an error.
Resolving restricted folder paths outside of the root path would create invalid path values.