Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: joomshaper.com Component: Helix Ultimate Clear all filters
TI-2026-41648 CVE-2026-57830 · GHSA-rvq6-rmvg-2f9m

Missing authorization in joomshaper.com Helix Ultimate extension for Joomla

Priority MEDIUM 45

Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7 - The Joomla extension Helix Ultimate is vulnerable to an unauthenticated arbitrary file deletion.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00496 Published 2026-07-13 No fix listed CWE-862
TI-2026-41647 CVE-2026-57829 · GHSA-6r9m-9724-qfvg

Cross-site scripting in joomshaper.com Helix Ultimate extension for Joomla

Priority LOW 39

Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7 - The Joomla extension Helix Ultimate is vulnerable to an unauthenticated stored XSS.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00253 Published 2026-07-13 No fix listed CWE-79