What’s Vulnerable › Products
joomshaper.com Helix Ultimate extension for Joomla vulnerabilities
7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.
Check whether your joomshaper.com Helix Ultimate extension for Joomla version is affected
Latest joomshaper.com Helix Ultimate extension for Joomla vulnerabilities
- CVE-2026-78079 — Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 (CVSS 5.3)
- CVE-2026-78078 — Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 (CVSS 8.9)
- CVE-2026-78077 — Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container & Embed Inputs in Helix Ultimate < 2.2.10 (CVSS 8.6)
- CVE-2026-78076 — Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate < 2.2.10 (CVSS 5.1)
- CVE-2026-78075 — Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10 (CVSS 5.1)
- CVE-2026-57830 — Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7 (CVSS 9.1)
- CVE-2026-57829 — Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7 (CVSS 6.1)