Log in Start free

joomshaper.com

Products

ProductCVEsExploitedLatest
Easy Store extension for Joomla10–Sep 23, 2026
Helix Ultimate extension for Joomla9–Nov 2, 2026
SP Page Builder extension for Joomla9–Aug 12, 2026
SP Property extension for Joomla6–Sep 10, 2026
SP Page Builder (Free and Pro) extension for Joomla4–Sep 14, 2026
SP Page Builder (Pro) extension for Joomla3–Oct 5, 2026
Helix3 extension for Joomla1–Jun 29, 2026

Exploited and recent CVEs

  • CVE-2026-103419 High 8.6 Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11. 0.4%
  • CVE-2026-105602 High 8.6 Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11. 0.4%
  • CVE-2026-102426 Medium 5.3 Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 0.2%
  • CVE-2026-90903 High 7.2 Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0 0.2%
  • CVE-2026-90901 High 8.6 Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0 0.4%
  • CVE-2026-90905 High 7.2 Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension 1.0.0-3.0.0 0.3%
  • CVE-2026-90902 High 8.6 Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 0.3%
  • CVE-2026-90904 High 8.6 Joomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0 0.4%
  • CVE-2026-90899 High 8.2 Joomla Extension - joomshaper.com - Unauthenticated PII Exposure via IDOR in Guest Checkout in Easy Store extension 1.0.0-3.0.0 0.4%
  • CVE-2026-90900 Medium 5.3 Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0 0.2%
  • CVE-2026-79701 Medium 6.9 Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass in Module Context in the Contact, Opt-in and Form Builder Addons in SP Page Builder Pro 3.2.6 - 5.6.1p2 and 6.0.0 - 6.9.0 0.5%
  • CVE-2026-81566 Medium 5.1 Joomla Extension - joomshaper.com - Missing Access Control in Menu Item Creation in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 0.4%
  • CVE-2026-81565 Medium 6.9 Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 0.5%
  • CVE-2026-79700 Medium 6.9 Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0 0.5%
  • CVE-2026-81564 High 7.0 Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Rename Allowing Arbitrary File Rename in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 0.5%
  • CVE-2026-78375 High 8.6 Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in the Content Plugin of SP Page Builder (Free and Pro) 5.2.1 - 6.9.0 0.4%
  • CVE-2026-78085 Medium 6.9 Joomla Extension - joomshaper.com - Path Traversal in Gallery Image Management in SP Property < 4.1.4 0.5%
  • CVE-2026-78302 High 8.6 Joomla Extension - joomshaper.com - Unauthenticated Cross-Site Scripting (XSS) via Unescaped Output in Views and Admin Lists in SP Property < 4.1.4 0.4%
  • CVE-2026-78083 High 7.1 Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4 0.2%
  • CVE-2026-78084 Medium 6.9 Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4 0.3%
  • CVE-2026-78082 Critical 9.3 Joomla Extension - joomshaper.com - Unauthenticated SQL Injection in Property Search and Map Filtering in SP Property < 4.1.4 0.5%
  • CVE-2026-78303 Medium 6.9 Joomla Extension - joomshaper.com - Unvalidated Email Destination & Form Manipulation in Booking Requests in SP Property < 4.1.4 0.4%
  • CVE-2026-78075 Medium 5.1 Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10 0.4%
  • CVE-2026-78076 Medium 5.1 Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate < 2.2.10 0.4%
  • CVE-2026-78078 High 8.9 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 0.4%
  • CVE-2026-78077 High 8.6 Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container & Embed Inputs in Helix Ultimate < 2.2.11 0.4%
  • CVE-2026-78079 Medium 5.3 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 0.4%
  • CVE-2026-67287 Medium 6.3 Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 0.4%
  • CVE-2026-67286 Medium 6.3 Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0 0.5%
  • CVE-2026-67285 Critical 9.2 Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 0.5%