Vendor

    Joomshaper.com

    40 known vulnerabilities in products by Joomshaper.com, 0 of them actively exploited (CISA KEV).

    Key figures

    40

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    8

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Joomshaper.com
    CriticalCVE-2026-65761

    Joomshaper.com Easy Store extension for Joomla: SQL Injection

    		—
    HighCVE-2026-49049

    Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler

    also in 1 other product

    		7.5
    CriticalCVE-2026-78082

    Joomshaper.com SP Property extension for Joomla: SQL Injection

    		—
    CriticalCVE-2026-65879

    Joomshaper.com SP Page Builder extension for Joomla: Use of Hard-coded Credentials

    		9.8
    CriticalCVE-2026-67285

    Joomshaper.com SP Page Builder extension for Joomla: Path Traversal

    		—
    HighCVE-2026-90904

    Joomshaper.com Easy Store extension for Joomla: Improper Access Control

    		—
    HighCVE-2026-78078

    Joomshaper.com Helix Ultimate extension for Joomla: Unrestricted Upload of File with Dangerous Type

    		—
    HighCVE-2026-78302

    Joomshaper.com SP Property extension for Joomla: Cross-site Scripting

    		—
    HighCVE-2026-66494

    Joomshaper.com SP Page Builder extension for Joomla: Cross-site Scripting

    		—
    CriticalCVE-2026-57830

    Joomshaper.com Helix Ultimate extension for Joomla: Missing Authorization

    also in 1 other product

    		9.1
    HighCVE-2026-90899

    Joomshaper.com Easy Store extension for Joomla: Authorization Bypass Through User-Controlled Key

    		—
    HighCVE-2026-90901

    Joomshaper.com Easy Store extension for Joomla: SQL Injection

    		—
    HighCVE-2026-78077

    Joomshaper.com Helix Ultimate extension for Joomla: Cross-site Scripting

    		—
    CriticalCVE-2026-65760

    Joomshaper.com Easy Store extension for Joomla: Exposure of Sensitive Information to an Unauthorized Actor

    		—
    HighCVE-2026-78375

    Joomshaper.com SP Page Builder (Free and Pro) extension for Joomla: SQL Injection

    		—
    HighCVE-2026-65878

    Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1

    		—
    CriticalCVE-2026-65766

    Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1

    		—
    HighCVE-2026-65759

    Joomshaper.com Easy Store extension for Joomla: Improper Access Control

    		—
    CriticalCVE-2026-65876

    Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0

    		—
    MediumCVE-2026-78085

    Joomshaper.com SP Property extension for Joomla: Path Traversal

    		—
    HighCVE-2026-90902

    Joomshaper.com Easy Store extension for Joomla: SQL Injection

    		—
    HighCVE-2026-81564

    Joomshaper.com SP Page Builder (Free and Pro) extension for Joomla: Path Traversal

    		—
    MediumCVE-2026-81565

    Joomshaper.com SP Page Builder (Free and Pro) extension for Joomla: Path Traversal

    		—
    MediumCVE-2026-79701

    Joomshaper.com SP Page Builder (Pro) extension for Joomla: Reliance on Untrusted Inputs in a Security Decision

    		—
    MediumCVE-2026-79700

    Joomshaper.com SP Page Builder (Pro) extension for Joomla: Reliance on Untrusted Inputs in a Security Decision

    		—

    All vulnerabilities in search

    News

    Products

    Products by Joomshaper.com
    Easy Store Extension For Joomla100
    Sp Page Builder Extension For Joomla90
    Helix Ultimate Extension For Joomla70
    Sp Property Extension For Joomla60
    Sp Page Builder (free And Pro) Extension For Joomla40
    Sp Page Builder (pro) Extension For Joomla30