Joomshaper.com vulnerabilities
42 CVEs and advisories name Joomshaper.com as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-66494Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0
- CVE-2026-65876Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0
- CVE-2026-65877Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1
- CVE-2026-65879Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1
- CVE-2026-65766Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1
- CVE-2026-65878Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1
- CVE-2026-65759Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1
- CVE-2026-65761Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1
- CVE-2026-65760Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1
- CVE-2026-57830Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7
- CVE-2026-57829Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7
- CVE-2026-49049Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler