Skip to content
OpenAdvisories

Vendor

joomshaper.com

42 known vulnerabilities.

Products

Easy Store extension for Joomla 10 Helix Ultimate extension for Joomla 9 SP Page Builder extension for Joomla 9 SP Property extension for Joomla 6 SP Page Builder (Free and Pro) extension for Joomla 4 SP Page Builder (Pro) extension for Joomla 3 Helix3 extension for Joomla 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-57830 Public exploit

    Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7

    Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7 - The Joomla extension Helix Ultimate is vulnerable to an unauthenticated arbitrary file deletion.

    joomshaper.com Helix Ultimate extension for Joomla Web / CMS
  • High 8.7
    CVE-2026-57829 Public exploit

    Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7

    Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7 - The Joomla extension Helix Ultimate is vulnerable to an unauthenticated stored XSS.

    joomshaper.com Helix Ultimate extension for Joomla Web / CMS
  • High 7.5
    CVE-2026-49049 Exploited Public exploit Scanner template

    Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler

    The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated attackers to delete arbitrary files, write arbitrary JSON files and update template parameters.

    joomshaper.com Helix3 extension for Joomla Web / CMS