Vendor

    JoomShaper

    5 known vulnerabilities in products by JoomShaper, 1 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in JoomShaper
    CriticalCVE-2026-48908

    JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability

    In CISA KEV

    		9.8
    HighCVE-2026-49049

    Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler

    also in 1 other product

    		7.5
    CriticalCVE-2026-57830

    Joomshaper.com Helix Ultimate extension for Joomla: Missing Authorization

    also in 1 other product

    		9.1
    HighCVE-2026-57829

    Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7

    also in 1 other product

    		6.1
    MediumCVE-2026-102426

    Joomshaper.com SP Page Builder (Pro) extension for Joomla: Cross-site Scripting

    also in 1 other product

    		6.1

    News