Ollyo vulnerabilities
We track 3 vulnerabilities in Ollyo products across 3 products. 3 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on July 13, 2026.
3vulnerabilities
2critical
1high
1exploited
8.8average CVSS score
Latest Ollyo vulnerabilities
- 9.1 Critical severity
Helix Ultimate extension for Joomla: Missing Authorization
Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7 - The Joomla extension Helix Ultimate is vulnerable to an unauthenticated arbitrary file deletion.
- 7.5 High severity
Helix3 extension for Joomla: Improper Access Control
The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated attackers to delete arbitrary files, write arbitrary JSON files and update template parameters.
- 9.8 Critical severity
JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Exploited
A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.