CVE-2026-65878

UNKNOWN 0.0

Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1- Improper path validation and ACL checks lead to a file deletion vector in the media manager.

CWE	CWE-22
Vendor	joomshaper.com
Product	sp page builder extension for joomla
Published	Jul 27, 2026

Stay Ahead of the Next One

Get instant alerts for joomshaper.com sp page builder extension for joomla

Be the first to know when new unknown vulnerabilities affecting joomshaper.com sp page builder extension for joomla are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

joomshaper.com / SP Page Builder extension for Joomla

1.0.0-6.7.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

joomshaper.com: https://www.joomshaper.com/page-builder mysites.guru: https://mysites.guru/blog/sp-page-builder-sql-injection-mail-relay-disclosure/

Credits

Phil Taylor