What’s Vulnerable › Products

joomshaper.com SP Page Builder extension for Joomla vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your joomshaper.com SP Page Builder extension for Joomla version is affected

Latest joomshaper.com SP Page Builder extension for Joomla vulnerabilities

• CVE-2026-67287 — Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 (CVSS 6.3)
• CVE-2026-67286 — Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0 (CVSS 6.3)
• CVE-2026-67285 — Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 (CVSS 9.2)
• CVE-2026-66494 — Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0 (CVSS 8.7)
• CVE-2026-65879 — Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 (CVSS 9.8)
• CVE-2026-65878 — Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1 (CVSS 8.3)
• CVE-2026-65877 — Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1 (CVSS 8.2)
• CVE-2026-65876 — Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0 (CVSS 9.2)
• CVE-2026-65766 — Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1 (CVSS 9.2)