VULNERABILITY INTELLIGENCE
CVE-2026-67285
EPSS probability0.51%
CISA KEVNot currently listed
Published2026-08-12
Last modified2026-10-24
Description
Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system.
Weakness classification
- security@joomla.org: CWE-22