joomshaper.com

Records43All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high21CVSS 7.0–8.9

Exploited now

joomshaper.com records in CISA KEV

TI-2026-36168 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 100KEV 2026-07-07

Components

Products in the NVD configurations · select one to filter the records

Helix Ultimate 2 records MEDIUM Sp Page Builder 2 records CRITICAL Helix3 1 record MEDIUM

Records

2 records in Sp Page Builder · all components

TI-2026-36168 CVE-2026-48908 · GHSA-8fwr-8fxr-8v2p

Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

CRITICAL 100KEV

A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.89176 Published 2026-06-20 No fix listed CWE-434

TI-2026-67745 CVE-2026-102426 · GHSA-rwqh-f6r7-qgh8

Cross-site scripting in SP Page Builder Pro Dynamic Content Filter

LOW 23

Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dc_filter_<fieldId> request paramete…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00162 Published 2026-10-05 No fix listed CWE-79

Open these records in search →

Critical	8
High	21
Medium	14
Low	0
No CVSS	0