SP Page Builder (Free and Pro) extension for Joomla vulnerabilities

Product

SP Page Builder (Free and Pro) extension for Joomla

by joomshaper.com · last CVE Sep 14, 2026

CVEs

On KEV

8.6

Max CVSS

New 30D

Severity mix

Critical 0High 2Medium 2Low 0

Severity

Exploitation

Watch

Add SP Page Builder (Free and Pro) extension for Joomla to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-78375	8.6	0%	Sep 14	Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in the Content Plugin of SP Page Builder (Free and Pro) 5.2.1 - 6.9.0 Affected: 5.2.1 - 6.9.0
CVE-2026-81564	7.0	0%	Sep 14	Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Rename Allowing Arbitrary File Rename in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 Affected: 4.0.0 - 6.9.0
CVE-2026-81565	6.9	0%	Sep 14	Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 Affected: 4.0.0 - 6.9.0
CVE-2026-81566	5.1	0%	Sep 14	Joomla Extension - joomshaper.com - Missing Access Control in Menu Item Creation in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 Affected: 4.0.0 - 6.9.0