MSRXMSRXSecurity
Vendors / JoomShaper

JoomShaper vulnerabilities being exploited

1 JoomShaper flaw was confirmed exploited in the wild in the past 365 days, across 1 product: SP Page Builder. If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-07-07CVE-2026-48908 SP Page Builder
JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability

JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

2026-07-10
Watch my JoomShaper softwareScan a websiteAll vendors

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.