JoomShaper
Security Risk Profile
76
/100
highSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 20, 2026 to present
4
Total CVEs
4
Critical+High
2
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
9.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
76/100
high
⚠️ 2 Active Exploits📈 2 in Last 30 Days
Severity Distribution
Critical
3High
1Medium
0Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
SQL Injection
1
2
Malicious File Upload
1
Most Affected Products
1. JoomShaper SP Page Builder3
2. JoomShaper Helix Ultimate1
3. Ollyo Helix Ultimate Joomla\!1
4. Ollyo Sp Page Builder Joomla\!1
5. JoomShaper SP LMS (com_splms)1
Recent Vulnerabilities
See more →CVE-2026-65876
CVSS 9.2critical
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1
7/27/2026🔧 No Patch
CVE-2026-57830
CVSS 8.8high
Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7
7/13/2026🔧 No Patch
CVE-2026-48908
CVSS 10.0critical
JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
6/20/2026⚠ Exploited🔧 No Patch
CVE-2026-48909
CVSS 9.5critical
Joomla Extension - joomshaper.com - PHP Object injection in SP LMS extension for Joomla < 4.1.4
6/20/2026⚠ Exploited🔧 No Patch
Monitor JoomShaper in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.