Vulnerability Bulletins

CVE-2026-67285

   
Affected software JOOMLA
 
Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-67285