Advisories · Technology
joomshaper.com SP Page Builder (Free and Pro) extension for Joomla.
Every CVE that names joomshaper.com SP Page Builder (Free and Pro) extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
Joomla Extension - joomshaper.com - Missing Access Control in Menu Item Creation in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0
- joomshaper.com SP Page Builder (Free and Pro) extension for Joomla
- Broken access control
- CVSS 6.9 Medium
Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0
- joomshaper.com SP Page Builder (Free and Pro) extension for Joomla
- Path traversal
- CVSS 7.0 High
Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Rename Allowing Arbitrary File Rename in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0
- joomshaper.com SP Page Builder (Free and Pro) extension for Joomla
- Path traversal
- CVSS 8.6 High
Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in the Content Plugin of SP Page Builder (Free and Pro) 5.2.1 - 6.9.0
- joomshaper.com SP Page Builder (Free and Pro) extension for Joomla
- SQL injection