Joomshaper.net vulnerabilities
We track 2 vulnerabilities in Joomshaper.net products across 2 products. 2 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on June 20, 2026.
2vulnerabilities
2critical
0high
1exploited
9.7average CVSS score
Latest Joomshaper.net vulnerabilities
- 9.5 Critical severity
SP LMS extension for Joomla: Deserialization of Untrusted Data
SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauthenticated remote attacker to execute arbitrary code on the server.
- 9.8 Critical severity
JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Exploited
A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.