VYPR
Critical severityNVD Advisory· Published Aug 12, 2026· Updated Aug 12, 2026

CVE-2026-67285

CVE-2026-67285

Description

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system.

Affected products

2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.