CVE-2026-65879

UNKNOWN 0.0

Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 - A hardcoded secret allowed attackers to forge the mail from address of forms.

Vendor	joomshaper.com
Product	sp page builder extension for joomla
Published	Jul 27, 2026

Stay Ahead of the Next One

Get instant alerts for joomshaper.com sp page builder extension for joomla

Be the first to know when new unknown vulnerabilities affecting joomshaper.com sp page builder extension for joomla are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

joomshaper.com / SP Page Builder extension for Joomla

1.0.0-6.7.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

joomshaper.com: https://www.joomshaper.com/page-builder mysites.guru: https://mysites.guru/blog/sp-page-builder-sql-injection-mail-relay-disclosure/

Credits

Phil Taylor