Skip to content

Joomshaper.com vulnerabilities

Products

Newest

joomshaper.com helix ultimate extension for joomla Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11. CVE-2026-103419 8.6 HighNovember 2, 2026
joomshaper.com helix ultimate extension for joomla Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11. CVE-2026-105602 8.6 HighNovember 2, 2026
ollyo sp page builder, joomshaper.com sp page builder (pro) extension for joomla +1 more Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 CVE-2026-102426 5.3 MediumOctober 5, 2026
joomshaper.com easy store extension for joomla Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0 CVE-2026-90903 7.2 HighSeptember 23, 2026
joomshaper.com easy store extension for joomla Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0 CVE-2026-90901 8.6 HighSeptember 23, 2026
joomshaper.com easy store extension for joomla Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension 1.0.0-3.0.0 CVE-2026-90905 7.2 HighSeptember 23, 2026
joomshaper.com easy store extension for joomla Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 CVE-2026-90902 8.6 HighSeptember 23, 2026
joomshaper.com easy store extension for joomla Joomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0 CVE-2026-90904 8.6 HighSeptember 23, 2026
joomshaper.com easy store extension for joomla Joomla Extension - joomshaper.com - Unauthenticated PII Exposure via IDOR in Guest Checkout in Easy Store extension 1.0.0-3.0.0 CVE-2026-90899 8.2 HighSeptember 23, 2026
joomshaper.com easy store extension for joomla Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0 CVE-2026-90900 5.3 MediumSeptember 23, 2026
joomshaper.com sp page builder (pro) extension for joomla Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass in Module Context in the Contact, Opt-in and Form Builder Addons in SP Page Builder Pro 3.2.6 - 5.6.1p2 and 6.0.0 - 6.9.0 CVE-2026-79701 6.9 MediumSeptember 14, 2026
joomshaper.com sp page builder (free and pro) extension for joomla Joomla Extension - joomshaper.com - Missing Access Control in Menu Item Creation in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 CVE-2026-81566 5.1 MediumSeptember 14, 2026
joomshaper.com sp page builder (free and pro) extension for joomla Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 CVE-2026-81565 6.9 MediumSeptember 14, 2026
joomshaper.com sp page builder (pro) extension for joomla Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0 CVE-2026-79700 6.9 MediumSeptember 14, 2026
joomshaper.com sp page builder (free and pro) extension for joomla Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Rename Allowing Arbitrary File Rename in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 CVE-2026-81564 7.0 HighSeptember 14, 2026
joomshaper.com sp page builder (free and pro) extension for joomla Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in the Content Plugin of SP Page Builder (Free and Pro) 5.2.1 - 6.9.0 CVE-2026-78375 8.6 HighSeptember 14, 2026
joomshaper.com sp property extension for joomla Joomla Extension - joomshaper.com - Path Traversal in Gallery Image Management in SP Property < 4.1.4 CVE-2026-78085 6.9 MediumSeptember 10, 2026
joomshaper.com sp property extension for joomla Joomla Extension - joomshaper.com - Unauthenticated Cross-Site Scripting (XSS) via Unescaped Output in Views and Admin Lists in SP Property < 4.1.4 CVE-2026-78302 8.6 HighSeptember 10, 2026
joomshaper.com sp property extension for joomla Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4 CVE-2026-78083 7.1 HighSeptember 10, 2026
joomshaper.com sp property extension for joomla Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4 CVE-2026-78084 6.9 MediumSeptember 10, 2026
joomshaper.com sp property extension for joomla Joomla Extension - joomshaper.com - Unauthenticated SQL Injection in Property Search and Map Filtering in SP Property < 4.1.4 CVE-2026-78082 9.3 CriticalSeptember 10, 2026
joomshaper.com sp property extension for joomla Joomla Extension - joomshaper.com - Unvalidated Email Destination & Form Manipulation in Booking Requests in SP Property < 4.1.4 CVE-2026-78303 6.9 MediumSeptember 10, 2026
joomshaper.com helix ultimate extension for joomla Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10 CVE-2026-78075 5.1 MediumAugust 31, 2026
joomshaper.com helix ultimate extension for joomla Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate < 2.2.10 CVE-2026-78076 5.1 MediumAugust 31, 2026
joomshaper.com helix ultimate extension for joomla Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 CVE-2026-78078 8.9 HighAugust 31, 2026
joomshaper.com helix ultimate extension for joomla Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container & Embed Inputs in Helix Ultimate < 2.2.11 CVE-2026-78077 8.6 HighAugust 31, 2026
joomshaper.com helix ultimate extension for joomla Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 CVE-2026-78079 5.3 MediumAugust 31, 2026
joomshaper.com sp page builder extension for joomla Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 CVE-2026-67287 6.3 MediumAugust 12, 2026
joomshaper.com sp page builder extension for joomla Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0 CVE-2026-67286 6.3 MediumAugust 12, 2026
joomshaper.com sp page builder extension for joomla Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 CVE-2026-67285 9.2 CriticalAugust 12, 2026
joomshaper.com sp page builder extension for joomla Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0 CVE-2026-66494 8.7 HighAugust 7, 2026
joomshaper.com sp page builder extension for joomla Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0 CVE-2026-65876 9.2 CriticalJuly 27, 2026
joomshaper.com sp page builder extension for joomla Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1 CVE-2026-65877 8.2 HighJuly 27, 2026
joomshaper.com sp page builder extension for joomla Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 CVE-2026-65879 9.8 CriticalJuly 27, 2026
joomshaper.com sp page builder extension for joomla Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1 CVE-2026-65766 9.2 CriticalJuly 27, 2026
joomshaper.com sp page builder extension for joomla Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1 CVE-2026-65878 8.3 HighJuly 27, 2026
joomshaper.com easy store extension for joomla Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 CVE-2026-65759 8.7 HighJuly 23, 2026
joomshaper.com easy store extension for joomla Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 CVE-2026-65761 Public exploit 9.3 CriticalJuly 23, 2026
joomshaper.com easy store extension for joomla Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 CVE-2026-65760 9.2 CriticalJuly 23, 2026
ollyo helix ultimate, joomshaper.com helix ultimate extension for joomla +1 more Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7 CVE-2026-57830 Public exploit 8.8 HighJuly 13, 2026
ollyo helix ultimate, joomshaper.com helix ultimate extension for joomla +1 more Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7 CVE-2026-57829 Public exploit 8.7 HighJuly 13, 2026
ollyo helix3, joomshaper.com helix3 extension for joomla +1 more Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler CVE-2026-49049 Known exploitedPublic exploit 7.5 HighJune 29, 2026