CVEs we hold for Joomshaper.com
Records whose assigning authority named Joomshaper.com as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-81566Joomla Extension - joomshaper.com - Missing Access Control in Menu Item Creation in SP Page Builder (Free and Pro)…joomshaper.com SP Page Builder (Free and Pro) extension for…
CVE-2026-81565Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder (Free and Pro)…joomshaper.com SP Page Builder (Free and Pro) extension for…
CVE-2026-81564Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Rename Allowing Arbitrary File Rename in SP…joomshaper.com SP Page Builder (Free and Pro) extension for…
CVE-2026-79701Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass in Module Context in the Contact, Opt-in and Form…joomshaper.com SP Page Builder (Pro) extension for Joomla
CVE-2026-79700Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP…joomshaper.com SP Page Builder (Pro) extension for Joomla
CVE-2026-78375Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in the Content Plugin of SP Page Builder…joomshaper.com SP Page Builder (Free and Pro) extension for…
CVE-2026-78303Joomla Extension - joomshaper.com - Unvalidated Email Destination & Form Manipulation in Booking Requests in SP…joomshaper.com SP Property extension for Joomla
CVE-2026-78302Joomla Extension - joomshaper.com - Unauthenticated Cross-Site Scripting (XSS) via Unescaped Output in Views and Admin…joomshaper.com SP Property extension for Joomla
CVE-2026-78085Joomla Extension - joomshaper.com - Path Traversal in Gallery Image Management in SP Property < 4.1.4joomshaper.com SP Property extension for Joomla
CVE-2026-78084Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4joomshaper.com SP Property extension for Joomla
CVE-2026-78083Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in…joomshaper.com SP Property extension for Joomla
CVE-2026-78082Joomla Extension - joomshaper.com - Unauthenticated SQL Injection in Property Search and Map Filtering in SP Property <…joomshaper.com SP Property extension for Joomla
CVE-2026-78079Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10joomshaper.com Helix Ultimate extension for Joomla
CVE-2026-78078Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10joomshaper.com Helix Ultimate extension for Joomla
CVE-2026-78077Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container & Embed Inputs in…joomshaper.com Helix Ultimate extension for Joomla
CVE-2026-78076Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix…joomshaper.com Helix Ultimate extension for Joomla
CVE-2026-78075Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10joomshaper.com Helix Ultimate extension for Joomla
CVE-2026-67287Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0joomshaper.com SP Page Builder extension for Joomla
CVE-2026-67286Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder <…joomshaper.com SP Page Builder extension for Joomla
CVE-2026-67285Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0joomshaper.com SP Page Builder extension for Joomla
CVE-2026-66494Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0joomshaper.com SP Page Builder extension for Joomla
CVE-2026-65879Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder…joomshaper.com SP Page Builder extension for Joomla
CVE-2026-65878Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1joomshaper.com SP Page Builder extension for Joomla
CVE-2026-65877Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1joomshaper.com SP Page Builder extension for Joomla
CVE-2026-65876Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0joomshaper.com SP Page Builder extension for Joomla
CVE-2026-65766Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1joomshaper.com SP Page Builder extension for Joomla
CVE-2026-65761Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1joomshaper.com Easy Store extension for Joomla
CVE-2026-65760Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension…joomshaper.com Easy Store extension for Joomla
CVE-2026-65759Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1joomshaper.com Easy Store extension for Joomla
CVE-2026-57830Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7joomshaper.com Helix Ultimate extension for Joomla
CVE-2026-57829Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7joomshaper.com Helix Ultimate extension for Joomla
CVE-2026-49049Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handlerjoomshaper.com Helix3 extension for Joomla
32 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.