CVE-2026-67285 — Vulnerability intelligence

joomshaper.com — SP Page Builder extension for Joomla

Published: 2026-08-12T13:54:48.738Z

CVSS

9.2

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system.

Sources

• CVE-2026-67285
• Original advisory
• CVE-2026-67285