OL
Vendor
Ollyo
5
CVEs
1
On KEV
1
New 30D
Products
SP9.8
SP Page Builder
Ollyo
2 CVEs1 on KEV1 new
HU9.1
Helix Ultimate
Ollyo
2 CVEs0 on KEV0 new
HE7.5
Helix3
Ollyo
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102426 | SP SP Page Builder Ollyo | 6.1 | Oct 5 | Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 |
| CVE-2026-57830 | HU Helix Ultimate Ollyo | 9.1 | Jul 13 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7 |
| CVE-2026-57829 | HU Helix Ultimate Ollyo | 6.1 | Jul 13 | Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7 |
| CVE-2026-49049 | HE Helix3 Ollyo | 7.5 | Jun 29 | Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler |
| CVE-2026-48908 In wildKEV | SP SP Page Builder Ollyo | 9.8 | Jun 20 | Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2 |