joomshaper.com

Records43All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high21CVSS 7.0–8.9

Exploited now

joomshaper.com records in CISA KEV

TI-2026-36168 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 100KEV 2026-07-07

Components

Products in the NVD configurations · select one to filter the records

Helix Ultimate 2 records MEDIUM Sp Page Builder 2 records CRITICAL Helix3 1 record MEDIUM

Records

1 record in Helix3 · all components

TI-2026-36275 CVE-2026-49049 · GHSA-xr7r-292v-jxg8

Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler

MEDIUM 41

The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated attackers to delete arbitrary files, write arbitrary JSON files and update template parameters.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00992 Published 2026-06-29 No fix listed CWE-284

Open these records in search →

Critical	8
High	21
Medium	14
Low	0
No CVSS	0