JO
Vendor
joomshaper.com
40
CVEs
0
On KEV
1
New 30D
Products
SP6.9
SP Page Builder (Pro) extension for Joomla
joomshaper.com
3 CVEs0 on KEV1 new
ES9.3
Easy Store extension for Joomla
joomshaper.com
10 CVEs0 on KEV0 new
SP9.8
SP Page Builder extension for Joomla
joomshaper.com
9 CVEs0 on KEV0 new
HU9.1
Helix Ultimate extension for Joomla
joomshaper.com
7 CVEs0 on KEV0 new
SP9.3
SP Property extension for Joomla
joomshaper.com
6 CVEs0 on KEV0 new
SP8.6
SP Page Builder (Free and Pro) extension for Joomla
joomshaper.com
4 CVEs0 on KEV0 new
HE7.5
Helix3 extension for Joomla
joomshaper.com
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102426 | SP SP Page Builder (Pro) extension for Joomla joomshaper.com | 6.1 | Oct 5 | Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 |
| CVE-2026-90903 | ES Easy Store extension for Joomla joomshaper.com | 7.2 | Sep 23 | Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0 |
| CVE-2026-90901 | ES Easy Store extension for Joomla joomshaper.com | 8.6 | Sep 23 | Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0 |
| CVE-2026-90905 | ES Easy Store extension for Joomla joomshaper.com | 7.2 | Sep 23 | Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension 1.0.0-3.0.0 |
| CVE-2026-90902 | ES Easy Store extension for Joomla joomshaper.com | 8.6 | Sep 23 | Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 |
| CVE-2026-90904 | ES Easy Store extension for Joomla joomshaper.com | 8.6 | Sep 23 | Joomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0 |
| CVE-2026-90899 | ES Easy Store extension for Joomla joomshaper.com | 8.2 | Sep 23 | Joomla Extension - joomshaper.com - Unauthenticated PII Exposure via IDOR in Guest Checkout in Easy Store extension 1.0.0-3.0.0 |
| CVE-2026-90900 | ES Easy Store extension for Joomla joomshaper.com | 5.3 | Sep 23 | Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0 |
| CVE-2026-79701 | SP SP Page Builder (Pro) extension for Joomla joomshaper.com | 6.9 | Sep 14 | Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass in Module Context in the Contact, Opt-in and Form Builder Addons in SP Page Builder Pro 3.2.6 - 5.6.1p2 and 6.0.0 - 6.9.0 |
| CVE-2026-81566 | SP SP Page Builder (Free and Pro) extension for Joomla joomshaper.com | 5.1 | Sep 14 | Joomla Extension - joomshaper.com - Missing Access Control in Menu Item Creation in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 |
| CVE-2026-81565 | SP SP Page Builder (Free and Pro) extension for Joomla joomshaper.com | 6.9 | Sep 14 | Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 |
| CVE-2026-79700 | SP SP Page Builder (Pro) extension for Joomla joomshaper.com | 6.9 | Sep 14 | Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0 |
| CVE-2026-81564 | SP SP Page Builder (Free and Pro) extension for Joomla joomshaper.com | 7.0 | Sep 14 | Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Rename Allowing Arbitrary File Rename in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 |
| CVE-2026-78375 | SP SP Page Builder (Free and Pro) extension for Joomla joomshaper.com | 8.6 | Sep 14 | Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in the Content Plugin of SP Page Builder (Free and Pro) 5.2.1 - 6.9.0 |
| CVE-2026-78085 | SP SP Property extension for Joomla joomshaper.com | 6.9 | Sep 10 | Joomla Extension - joomshaper.com - Path Traversal in Gallery Image Management in SP Property < 4.1.4 |
| CVE-2026-78302 | SP SP Property extension for Joomla joomshaper.com | 8.6 | Sep 10 | Joomla Extension - joomshaper.com - Unauthenticated Cross-Site Scripting (XSS) via Unescaped Output in Views and Admin Lists in SP Property < 4.1.4 |
| CVE-2026-78083 | SP SP Property extension for Joomla joomshaper.com | 7.1 | Sep 10 | Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4 |
| CVE-2026-78084 | SP SP Property extension for Joomla joomshaper.com | 6.9 | Sep 10 | Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4 |
| CVE-2026-78082 | SP SP Property extension for Joomla joomshaper.com | 9.3 | Sep 10 | Joomla Extension - joomshaper.com - Unauthenticated SQL Injection in Property Search and Map Filtering in SP Property < 4.1.4 |
| CVE-2026-78303 | SP SP Property extension for Joomla joomshaper.com | 6.9 | Sep 10 | Joomla Extension - joomshaper.com - Unvalidated Email Destination & Form Manipulation in Booking Requests in SP Property < 4.1.4 |
| CVE-2026-78075 | HU Helix Ultimate extension for Joomla joomshaper.com | 5.1 | Aug 31 | Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10 |
| CVE-2026-78076 | HU Helix Ultimate extension for Joomla joomshaper.com | 5.1 | Aug 31 | Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate < 2.2.10 |
| CVE-2026-78078 | HU Helix Ultimate extension for Joomla joomshaper.com | 8.9 | Aug 31 | Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 |
| CVE-2026-78077 | HU Helix Ultimate extension for Joomla joomshaper.com | 8.6 | Aug 31 | Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container & Embed Inputs in Helix Ultimate < 2.2.10 |
| CVE-2026-78079 | HU Helix Ultimate extension for Joomla joomshaper.com | 5.3 | Aug 31 | Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 |
| CVE-2026-67287 | SP SP Page Builder extension for Joomla joomshaper.com | 6.3 | Aug 12 | Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 |
| CVE-2026-67286 | SP SP Page Builder extension for Joomla joomshaper.com | 6.3 | Aug 12 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0 |
| CVE-2026-67285 | SP SP Page Builder extension for Joomla joomshaper.com | 9.2 | Aug 12 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 |
| CVE-2026-66494 | SP SP Page Builder extension for Joomla joomshaper.com | 8.7 | Aug 7 | Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0 |
| CVE-2026-65876 | SP SP Page Builder extension for Joomla joomshaper.com | 9.2 | Jul 27 | Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0 |
| CVE-2026-65877 | SP SP Page Builder extension for Joomla joomshaper.com | 8.2 | Jul 27 | Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1 |
| CVE-2026-65879 | SP SP Page Builder extension for Joomla joomshaper.com | 9.8 | Jul 27 | Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 |
| CVE-2026-65766 | SP SP Page Builder extension for Joomla joomshaper.com | 9.2 | Jul 27 | Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1 |
| CVE-2026-65878 | SP SP Page Builder extension for Joomla joomshaper.com | 8.3 | Jul 27 | Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1 |
| CVE-2026-65759 | ES Easy Store extension for Joomla joomshaper.com | 8.7 | Jul 23 | Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 |
| CVE-2026-65761 | ES Easy Store extension for Joomla joomshaper.com | 9.3 | Jul 23 | Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 |
| CVE-2026-65760 | ES Easy Store extension for Joomla joomshaper.com | 9.2 | Jul 23 | Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 |
| CVE-2026-57830 | HU Helix Ultimate extension for Joomla joomshaper.com | 9.1 | Jul 13 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7 |
| CVE-2026-57829 | HU Helix Ultimate extension for Joomla joomshaper.com | 6.1 | Jul 13 | Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7 |
| CVE-2026-49049 | HE Helix3 extension for Joomla joomshaper.com | 7.5 | Jun 29 | Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler |