SP Page Builder (Free and Pro) extension for Joomla vulnerabilities

2 known vulnerabilities in SP Page Builder (Free and Pro) extension for Joomla from Joomshaper.com. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  SP Page Builder (Free and Pro) extension for…: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-81564Sep 14, 2026Joomshaper.com

  Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Rename Allowing Arbitrary File Rename in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 - The media rename task applied neither of the directory boundary checks used by the folder operati

• 8.6 High severity

  SP Page Builder (Free and Pro) extension for…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-78375Sep 14, 2026Joomshaper.com

  Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in the Content Plugin of SP Page Builder (Free and Pro) 5.2.1 - 6.9.0 - plgContentSppagebuilder::onContentAfterSave() read jform[attribs][sppagebuilder_article_id] from the request and