{"schema_version":1,"title":"JoomShaper vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 38 vulnerabilities in JoomShaper: 7 in the last 7 days and 35 in the last 90 days, 1 of them critical and 1 exploited in the wild. The most recent, CVE-2026-90905, was published on 23 September 2026. 5 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/joomshaper","json_url":"https://junglewise.ai/threats/vendors/joomshaper.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/joomshaper","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":1,"all_time":38,"critical":1,"exploited":1,"last_7_days":7,"last_30_days":24,"last_90_days":35,"last_365_days":38},"latest":[{"cve":"CVE-2026-90905","epss":0.0026,"slug":"cve-2026-90905-joomla-extension-joomshaper-com-missing-csrf-and-access-control","title":"Joomla Easy Store extension missing CSRF and access control","severity":"info","exploited":false,"published_at":"2026-09-23T19:19:43.673+00:00","url":"https://junglewise.ai/threats/cve-2026-90905-joomla-extension-joomshaper-com-missing-csrf-and-access-control"},{"cve":"CVE-2026-90904","epss":0.0031,"slug":"cve-2026-90904-joomla-extension-joomshaper-com-broken-access-control-acl-bypass","title":"Joomla Easy Store extension access control bypass in ApiController","severity":"info","exploited":false,"published_at":"2026-09-23T19:19:43.543+00:00","url":"https://junglewise.ai/threats/cve-2026-90904-joomla-extension-joomshaper-com-broken-access-control-acl-bypass"},{"cve":"CVE-2026-90903","epss":0.0017,"slug":"cve-2026-90903-joomla-extension-joomshaper-com-missing-csrf-token-verification","title":"Joomla Easy Store extension missing CSRF token verification in AJAX endpoints","severity":"info","exploited":false,"published_at":"2026-09-23T19:19:43.417+00:00","url":"https://junglewise.ai/threats/cve-2026-90903-joomla-extension-joomshaper-com-missing-csrf-token-verification"},{"cve":"CVE-2026-90902","epss":0.0025,"slug":"cve-2026-90902-joomla-extension-joomshaper-com-authenticated-privileged-sql","title":"Joomla Easy Store SQL injection in coupon bulk update","severity":"info","exploited":false,"published_at":"2026-09-23T19:19:43.283+00:00","url":"https://junglewise.ai/threats/cve-2026-90902-joomla-extension-joomshaper-com-authenticated-privileged-sql"},{"cve":"CVE-2026-90901","epss":0.004,"slug":"cve-2026-90901-joomla-extension-joomshaper-com-authenticated-privileged-sql","title":"Joomla Easy Store SQL injection in media deletion","severity":"info","exploited":false,"published_at":"2026-09-23T19:19:43.15+00:00","url":"https://junglewise.ai/threats/cve-2026-90901-joomla-extension-joomshaper-com-authenticated-privileged-sql"},{"cve":"CVE-2026-90900","epss":0.0017,"slug":"cve-2026-90900-joomla-extension-joomshaper-com-missing-csrf-token-verification","title":"Joomla Easy Store CSRF vulnerability in product review submission","severity":"info","exploited":false,"published_at":"2026-09-23T19:19:43.02+00:00","url":"https://junglewise.ai/threats/cve-2026-90900-joomla-extension-joomshaper-com-missing-csrf-token-verification"},{"cve":"CVE-2026-90899","epss":0.0033,"slug":"cve-2026-90899-joomla-extension-joomshaper-com-unauthenticated-pii-exposure-via","title":"Joomla Easy Store insecure guest checkout IDOR","severity":"info","exploited":false,"published_at":"2026-09-23T19:19:42.873+00:00","url":"https://junglewise.ai/threats/cve-2026-90899-joomla-extension-joomshaper-com-unauthenticated-pii-exposure-via"},{"cve":"CVE-2026-79701","cvss":7.5,"epss":0.0045,"slug":"cve-2026-79701-joomshaper-sp-page-builder-pro-captcha-bypass-in-addons","title":"JoomShaper SP Page Builder Pro CAPTCHA bypass in addons","severity":"info","exploited":false,"published_at":"2026-09-14T12:17:46.137+00:00","url":"https://junglewise.ai/threats/cve-2026-79701-joomshaper-sp-page-builder-pro-captcha-bypass-in-addons"},{"cve":"CVE-2026-81566","epss":0.0039,"slug":"cve-2026-81566-joomshaper-sp-page-builder-missing-access-control-in-menu-item","title":"JoomShaper SP Page Builder missing access control in menu item creation","severity":"info","exploited":false,"published_at":"2026-09-14T11:17:04.993+00:00","url":"https://junglewise.ai/threats/cve-2026-81566-joomshaper-sp-page-builder-missing-access-control-in-menu-item"},{"cve":"CVE-2026-81565","cvss":7.5,"epss":0.0047,"slug":"cve-2026-81565-joomshaper-sp-page-builder-arbitrary-file-upload-directory","title":"JoomShaper SP Page Builder arbitrary file upload directory traversal","severity":"info","exploited":false,"published_at":"2026-09-14T11:17:04.863+00:00","url":"https://junglewise.ai/threats/cve-2026-81565-joomshaper-sp-page-builder-arbitrary-file-upload-directory"},{"cve":"CVE-2026-81564","epss":0.0047,"slug":"cve-2026-81564-joomshaper-sp-page-builder-arbitrary-file-rename-via-missing","title":"JoomShaper SP Page Builder arbitrary file rename via missing directory confinement","severity":"info","exploited":false,"published_at":"2026-09-14T11:17:04.707+00:00","url":"https://junglewise.ai/threats/cve-2026-81564-joomshaper-sp-page-builder-arbitrary-file-rename-via-missing"},{"cve":"CVE-2026-79700","epss":0.0045,"slug":"cve-2026-79700-joomshaper-sp-page-builder-pro-captcha-bypass-in-optin-form-addon","title":"JoomShaper SP Page Builder Pro CAPTCHA bypass in optin_form addon","severity":"info","exploited":false,"published_at":"2026-09-14T11:17:04.57+00:00","url":"https://junglewise.ai/threats/cve-2026-79700-joomshaper-sp-page-builder-pro-captcha-bypass-in-optin-form-addon"},{"cve":"CVE-2026-78375","cvss":6.5,"epss":0.0037,"slug":"cve-2026-78375-joomshaper-sp-page-builder-sql-injection-in-content-plugin","title":"JoomShaper SP Page Builder SQL injection in Content plugin","severity":"info","exploited":false,"published_at":"2026-09-14T11:17:04.43+00:00","url":"https://junglewise.ai/threats/cve-2026-78375-joomshaper-sp-page-builder-sql-injection-in-content-plugin"},{"cve":"CVE-2026-78085","cvss":0,"epss":0.005,"slug":"cve-2026-78085-joomshaper-sp-property-path-traversal-in-gallery-image-management","title":"JoomShaper SP Property path traversal in gallery image management","severity":"info","exploited":false,"published_at":"2026-09-10T11:17:07.35+00:00","url":"https://junglewise.ai/threats/cve-2026-78085-joomshaper-sp-property-path-traversal-in-gallery-image-management"},{"cve":"CVE-2026-78303","epss":0.0043,"slug":"cve-2026-78303-joomshaper-sp-property-unvalidated-email-destination-in-booking","title":"JoomShaper SP Property unvalidated email destination in booking forms","severity":"info","exploited":false,"published_at":"2026-09-10T10:17:32.37+00:00","url":"https://junglewise.ai/threats/cve-2026-78303-joomshaper-sp-property-unvalidated-email-destination-in-booking"},{"cve":"CVE-2026-78302","cvss":6.5,"epss":0.0044,"slug":"cve-2026-78302-joomshaper-sp-property-stored-xss-via-unescaped-output-in-views","title":"JoomShaper SP Property stored XSS via unescaped output in views","severity":"info","exploited":false,"published_at":"2026-09-10T10:17:32.25+00:00","url":"https://junglewise.ai/threats/cve-2026-78302-joomshaper-sp-property-stored-xss-via-unescaped-output-in-views"},{"cve":"CVE-2026-78084","epss":0.0033,"slug":"cve-2026-78084-joomshaper-sp-property-authorization-bypass-in-gallery-management","title":"JoomShaper SP Property authorization bypass in gallery management","severity":"info","exploited":false,"published_at":"2026-09-10T10:17:32.137+00:00","url":"https://junglewise.ai/threats/cve-2026-78084-joomshaper-sp-property-authorization-bypass-in-gallery-management"},{"cve":"CVE-2026-78083","epss":0.0021,"slug":"cve-2026-78083-joomshaper-sp-property-csrf-token-bypass-in-booking-and-contact","title":"JoomShaper SP Property CSRF token bypass in booking and contact forms","severity":"info","exploited":false,"published_at":"2026-09-10T10:17:32.02+00:00","url":"https://junglewise.ai/threats/cve-2026-78083-joomshaper-sp-property-csrf-token-bypass-in-booking-and-contact"},{"cve":"CVE-2026-78082","cvss":7.5,"epss":0.0051,"slug":"cve-2026-78082-joomshaper-sp-property-unauthenticated-sql-injection-in-search","title":"JoomShaper SP Property unauthenticated SQL injection in search filtering","severity":"info","exploited":false,"published_at":"2026-09-10T10:17:31.863+00:00","url":"https://junglewise.ai/threats/cve-2026-78082-joomshaper-sp-property-unauthenticated-sql-injection-in-search"},{"cve":"CVE-2026-78079","epss":0.0041,"slug":"cve-2026-78079-joomshaper-helix-ultimate-open-redirect-via-base64-return","title":"JoomShaper Helix Ultimate open redirect via Base64 return parameter","severity":"info","exploited":false,"published_at":"2026-08-31T14:17:24.397+00:00","url":"https://junglewise.ai/threats/cve-2026-78079-joomshaper-helix-ultimate-open-redirect-via-base64-return"},{"cve":"CVE-2026-78078","epss":0.0044,"slug":"cve-2026-78078-joomshaper-helix-ultimate-privileged-file-upload-bypass-via","title":"JoomShaper Helix Ultimate privileged file upload bypass via content spoofing","severity":"info","exploited":false,"published_at":"2026-08-31T14:17:24.257+00:00","url":"https://junglewise.ai/threats/cve-2026-78078-joomshaper-helix-ultimate-privileged-file-upload-bypass-via"},{"cve":"CVE-2026-78077","epss":0.0042,"slug":"cve-2026-78077-joomshaper-helix-ultimate-stored-xss-in-megamenu-layout","title":"JoomShaper Helix Ultimate stored XSS in MegaMenu layout","severity":"info","exploited":false,"published_at":"2026-08-31T14:17:24.113+00:00","url":"https://junglewise.ai/threats/cve-2026-78077-joomshaper-helix-ultimate-stored-xss-in-megamenu-layout"},{"cve":"CVE-2026-78076","epss":0.0039,"slug":"cve-2026-78076-joomshaper-helix-ultimate-broken-access-control-in-megamenu","title":"JoomShaper Helix Ultimate broken access control in MegaMenu settings","severity":"info","exploited":false,"published_at":"2026-08-31T14:17:23.987+00:00","url":"https://junglewise.ai/threats/cve-2026-78076-joomshaper-helix-ultimate-broken-access-control-in-megamenu"},{"cve":"CVE-2026-78075","epss":0.0039,"slug":"cve-2026-78075-joomshaper-helix-ultimate-broken-object-level-authorization-in","title":"JoomShaper Helix Ultimate broken object-level authorization in blog image deletion","severity":"info","exploited":false,"published_at":"2026-08-31T14:17:23.84+00:00","url":"https://junglewise.ai/threats/cve-2026-78075-joomshaper-helix-ultimate-broken-object-level-authorization-in"},{"cve":"CVE-2026-65879","cvss":6.9,"slug":"cve-2026-65879-joomshaper-sp-page-builder-unauthenticated-mail-relay-via","title":"JoomShaper SP Page Builder unauthenticated mail relay via hardcoded secret","severity":"info","exploited":false,"published_at":"2026-07-27T14:17:01.103+00:00","url":"https://junglewise.ai/threats/cve-2026-65879-joomshaper-sp-page-builder-unauthenticated-mail-relay-via"}],"vendor":{"hub":true,"name":"JoomShaper","slug":"joomshaper","homepage":"https://www.joomshaper.com/","description":"A software developer and provider of templates and extensions for the Joomla content management system.","url":"https://junglewise.ai/threats/vendors/joomshaper"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":6},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":6},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":7}],"most_severe":[{"cve":"CVE-2026-48908","cvss":10,"epss":0.008,"slug":"cve-2026-48908-joomshaper-sp-page-builder-arbitrary-file-upload-in-joomla","title":"JoomShaper SP Page Builder arbitrary file upload in Joomla","severity":"critical","exploited":true,"published_at":"2026-06-20T13:16:42.08+00:00","url":"https://junglewise.ai/threats/cve-2026-48908-joomshaper-sp-page-builder-arbitrary-file-upload-in-joomla"},{"cve":"CVE-2017-20266","cvss":8.2,"slug":"cve-2017-20266-joomshaper-sp-movie-database-sql-injection-in-searchword","title":"Joomshaper SP Movie Database SQL injection in searchword parameter","severity":"high","exploited":false,"published_at":"2026-06-19T16:16:16.427+00:00","url":"https://junglewise.ai/threats/cve-2017-20266-joomshaper-sp-movie-database-sql-injection-in-searchword"},{"cve":"CVE-2026-48909","cvss":9.5,"slug":"cve-2026-48909-joomshaper-sp-lms-remote-code-execution-via-cookie","title":"JoomShaper SP LMS remote code execution via cookie deserialization","severity":"info","exploited":false,"published_at":"2026-06-20T13:16:42.317+00:00","url":"https://junglewise.ai/threats/cve-2026-48909-joomshaper-sp-lms-remote-code-execution-via-cookie"},{"cve":"CVE-2026-65761","cvss":9.3,"slug":"cve-2026-65761-joomshaper-easystore-sql-injection-in-product-list-sorting","title":"JoomShaper EasyStore SQL injection in product list sorting","severity":"info","exploited":false,"published_at":"2026-07-23T17:16:30.433+00:00","url":"https://junglewise.ai/threats/cve-2026-65761-joomshaper-easystore-sql-injection-in-product-list-sorting"},{"cve":"CVE-2026-65876","cvss":9.2,"slug":"cve-2026-65876-joomshaper-sp-page-builder-sql-injection-in-loadmorearticles","title":"JoomShaper SP Page Builder SQL injection in loadMoreArticles","severity":"info","exploited":false,"published_at":"2026-07-27T14:17:00.68+00:00","url":"https://junglewise.ai/threats/cve-2026-65876-joomshaper-sp-page-builder-sql-injection-in-loadmorearticles"},{"cve":"CVE-2026-65766","cvss":9.2,"slug":"cve-2026-65766-joomshaper-sp-page-builder-sql-injection-in-dynamic-content","title":"JoomShaper SP Page Builder SQL injection in Dynamic Content endpoint","severity":"info","exploited":false,"published_at":"2026-07-27T14:17:00.533+00:00","url":"https://junglewise.ai/threats/cve-2026-65766-joomshaper-sp-page-builder-sql-injection-in-dynamic-content"},{"cve":"CVE-2026-65760","cvss":9.2,"slug":"cve-2026-65760-joomshaper-easy-store-improper-access-control-in-order-views","title":"JoomShaper Easy Store improper access control in order views","severity":"info","exploited":false,"published_at":"2026-07-23T17:16:30.31+00:00","url":"https://junglewise.ai/threats/cve-2026-65760-joomshaper-easy-store-improper-access-control-in-order-views"},{"cve":"CVE-2026-57830","cvss":8.8,"slug":"cve-2026-57830-joomshaper-helix-ultimate-unauthenticated-arbitrary-file-deletion","title":"JoomShaper Helix Ultimate unauthenticated arbitrary file deletion","severity":"info","exploited":false,"published_at":"2026-07-13T08:16:21.713+00:00","url":"https://junglewise.ai/threats/cve-2026-57830-joomshaper-helix-ultimate-unauthenticated-arbitrary-file-deletion"},{"cve":"CVE-2026-65759","cvss":8.7,"slug":"cve-2026-65759-joomshaper-easy-store-unauthenticated-order-forgery-in-checkout","title":"JoomShaper Easy Store unauthenticated order forgery in checkout repay task","severity":"info","exploited":false,"published_at":"2026-07-23T17:16:30.19+00:00","url":"https://junglewise.ai/threats/cve-2026-65759-joomshaper-easy-store-unauthenticated-order-forgery-in-checkout"},{"cve":"CVE-2026-57829","cvss":8.7,"slug":"cve-2026-57829-joomshaper-helix-ultimate-unauthenticated-stored-xss","title":"JoomShaper Helix Ultimate unauthenticated stored XSS","severity":"info","exploited":false,"published_at":"2026-07-13T08:16:21.547+00:00","url":"https://junglewise.ai/threats/cve-2026-57829-joomshaper-helix-ultimate-unauthenticated-stored-xss"}],"generated_at":"2026-09-26T12:07:00.15149+00:00","technologies":[{"name":"JoomShaper SP Page Builder","slug":"sp-page-builder","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/sp-page-builder"},{"name":"JoomShaper Helix-Ultimate","slug":"helix-ultimate","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/helix-ultimate"},{"name":"JoomShaper SP Property","slug":"sp-property","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/sp-property"},{"name":"JoomShaper Easy Store","slug":"easy-store","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/easy-store"},{"name":"JoomShaper SP Page Builder Pro","slug":"sp-page-builder-pro","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/sp-page-builder-pro"}]}