JoomShaper

Records2All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

JoomShaper records in CISA KEV

TI-2026-36168 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 100KEV 2026-07-07

Components

Products in the NVD configurations · select one to filter the records

Sp Movie Database 1 record HIGH

Records

2 records

TI-2026-36168 CVE-2026-48908 · GHSA-8fwr-8fxr-8v2p

Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

CRITICAL 100KEV

A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.89176 Published 2026-06-20 No fix listed CWE-434

TI-2017-14330 CVE-2017-20266 · GHSA-hccq-j8pc-rxf8

Joomla SP Movie Database 1.3 SQL Injection via searchword

HIGH 77

Joomla SP Movie Database 1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the searchword parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00413 Published 2026-06-19 No fix listed CWE-89

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0