CVE-2026-67286mediumCWE-22

CVE-2026-67286: falha de média gravidade em joomshaper.com SP Page Builder extension for…

Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SP Page Builder extension for Joomla

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.5%
Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0 - An unauthenticated attacker can create arbitrary directories and files with a predefined name.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Produtos afetados
joomshaper.com · SP Page Builder extension for Joomla
CVEs relacionadas — joomshaper.com SP Page Builder extension for…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-65879CRITICALJoomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1EPSS 0.5%CVE-2026-67285CRITICALJoomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0EPSS 0.5%CVE-2026-66494HIGHJoomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0EPSS 0.5%CVE-2026-65878HIGHJoomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1EPSS 0.5%CVE-2026-67287MEDIUMJoomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0EPSS 0.4%CVE-2026-65766CRITICALJoomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1EPSS 0.4%