Skip to content
OpenAdvisories

Vendor

joomshaper.net

2 known vulnerabilities.

Products

SP LMS extension for Joomla 1 SP Page Builder extension for Joomla 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-48908 Exploited Public exploit Scanner template EPSS 89%

    Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

    A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

    joomshaper.net SP Page Builder extension for Joomla Web / CMS
    KEV Jul 7, 2026
  • Critical 9.5
    CVE-2026-48909 Public exploit Scanner template

    Joomla Extension - joomshaper.com - PHP Object injection in SP LMS extension for Joomla < 4.1.4

    SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauthenticated remote attacker to execute arbitrary code on the server.

    joomshaper.net SP LMS extension for Joomla Web / CMS