Skip to content
Joomshaper.net vulnerabilities
Newest
-
joomshaper.com sp page builder extension for joomla
Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0
CVE-2026-67287
6.3 Medium
-
joomshaper.com sp page builder extension for joomla
Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0
CVE-2026-67286
6.3 Medium
-
joomshaper.com sp page builder extension for joomla
Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0
CVE-2026-67285
9.2 Critical
-
joomshaper.com sp page builder extension for joomla
Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0
CVE-2026-66494
8.7 High
-
joomshaper.com sp page builder extension for joomla
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0
CVE-2026-65876
9.2 Critical
-
joomshaper.com sp page builder extension for joomla
Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1
CVE-2026-65877
8.2 High
-
joomshaper.com sp page builder extension for joomla
Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1
CVE-2026-65879
9.8 Critical
-
joomshaper.com sp page builder extension for joomla
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1
CVE-2026-65766
9.2 Critical
-
joomshaper.com sp page builder extension for joomla
Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1
CVE-2026-65878
8.3 High
-
joomshaper sp page builder, joomshaper.net sp page builder extension for joomla +1 more
Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2
CVE-2026-48908
In KEVPublic exploit
EPSS 89.2%
10.0 Critical
-
joomshaper.net sp lms extension for joomla
Joomla Extension - joomshaper.com - PHP Object injection in SP LMS extension for Joomla < 4.1.4
CVE-2026-48909
Public exploit
9.5 Critical