HU
Product
Helix Ultimate extension for Joomla
7
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 4Low 0
Watch
Add Helix Ultimate extension for Joomla to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-57830 | 9.1 | Jul 13 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7 Affected: 1.0-2.2.6 |
| CVE-2026-78078 | 8.9 | Aug 31 | Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 Affected: 1.0-2.2.9 |
| CVE-2026-78077 | 8.6 | Aug 31 | Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container & Embed Inputs in Helix Ultimate < 2.2.10 Affected: 1.0-2.2.9 |
| CVE-2026-57829 | 6.1 | Jul 13 | Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7 Affected: 1.0-2.2.6 |
| CVE-2026-78079 | 5.3 | Aug 31 | Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 Affected: 1.0-2.2.9 |
| CVE-2026-78075 | 5.1 | Aug 31 | Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10 Affected: 1.0-2.2.9 |
| CVE-2026-78076 | 5.1 | Aug 31 | Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate < 2.2.10 Affected: 1.0-2.2.9 |
Showing 7