Read the docs

joomshaper.com

Records43All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high21CVSS 7.0–8.9

Exploited now

joomshaper.com records in CISA KEV
TI-2026-36168 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability Priority CRITICAL 100KEV 2026-07-07

Components

Products in the NVD configurations · select one to filter the records
Helix Ultimate 2 records MEDIUM Sp Page Builder 2 records CRITICAL Helix3 1 record MEDIUM

Records

2 records in Helix Ultimate · all components

TI-2026-41648 CVE-2026-57830 · GHSA-rvq6-rmvg-2f9m

Missing authorization in joomshaper.com Helix Ultimate extension for Joomla

Priority MEDIUM 45

Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7 - The Joomla extension Helix Ultimate is vulnerable to an unauthenticated arbitrary file deletion.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00496 Published 2026-07-13 No fix listed CWE-862
TI-2026-41647 CVE-2026-57829 · GHSA-6r9m-9724-qfvg

Cross-site scripting in joomshaper.com Helix Ultimate extension for Joomla

Priority LOW 39

Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7 - The Joomla extension Helix Ultimate is vulnerable to an unauthenticated stored XSS.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00253 Published 2026-07-13 No fix listed CWE-79
Open these records in search →