CVE-2026-67285

Description

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system.

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-67285 ↗
• www.joomshaper.com/page-builder ↗

Related CVEs

• CVE-2026-73263prowler-cloud / prowlerCVSS 9.9
• CVE-2026-50561xerrors / YuxiCVSS 9.4
• CVE-2026-57858Cal.com / Cal.com Self-Hosted (Cal.diy)CVSS 9.3
• CVE-2026-67282fabrikar.com / Fabrik extension for JoomlaCVSS 10.0
• CVE-2026-65879joomshaper.com / SP Page Builder extension for JoomlaCVSS 9.8
• CVE-2026-65876joomshaper.com / SP Page Builder extension for JoomlaCVSS 9.2
• CVE-2026-65766joomshaper.com / SP Page Builder extension for JoomlaCVSS 9.2
• CVE-2026-65761joomshaper.com / Easy Store extension for JoomlaCVSS 9.3