CVE Tools
Track your stack

Joomshaper-com

38 CVEs tracked since 2026. Since Jul 2026, none of them reached CISA KEV.

Joomshaper-com CVEs per month

Jul 2026 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Joomshaper-com CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-07100
2026-0890
2026-09190
2026-106 or fewer

Products

The products that kept showing up in Joomshaper-com's monthly top three, with their CVEs summed over those months.

  1. Easy Store Extension For Joomla102 months
  2. Sp Page Builder Extension For Joomla92 months
  3. Helix Ultimate Extension For Joomla72 months
  4. Sp Property Extension For Joomla61 month
  5. Sp Page Builder (Free and Pro) Extension For Joomla41 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Joomshaper-com.

  1. CVE-2026-102426Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p26.1
  2. CVE-2026-90903Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0—
  3. CVE-2026-90901Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0—
  4. CVE-2026-90905Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension 1.0.0-3.0.0—
  5. CVE-2026-90902Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0—
  6. CVE-2026-90904Joomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0—
  7. CVE-2026-90899Joomla Extension - joomshaper.com - Unauthenticated PII Exposure via IDOR in Guest Checkout in Easy Store extension 1.0.0-3.0.0—
  8. CVE-2026-90900Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0—
  9. CVE-2026-79701Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass in Module Context in the Contact, Opt-in and Form Builder Addons in SP Page Builder Pro 3.2.6 - 5.6.1p2 and 6.0.0 - 6.9.0—
  10. CVE-2026-81566Joomla Extension - joomshaper.com - Missing Access Control in Menu Item Creation in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0—
  11. CVE-2026-81565Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0—
  12. CVE-2026-79700Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0—
  13. CVE-2026-81564Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Rename Allowing Arbitrary File Rename in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0—
  14. CVE-2026-78375Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in the Content Plugin of SP Page Builder (Free and Pro) 5.2.1 - 6.9.0—
  15. CVE-2026-78085Joomla Extension - joomshaper.com - Path Traversal in Gallery Image Management in SP Property < 4.1.4—

The record

Peak rank
#80 in Sep 2026
Busiest month shown
Sep 2026, 19 CVEs
Months with a KEV entry
0 since Jul 2026
Monthly snapshots
3 since 2026
Joomshaper-com's full record, month by month