VENDOR

JoomShaper vulnerabilities: CVEs, exploitation and patches

Every JoomShaper CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

CVE-2026-48908
SP Page Builder unrestricted file upload leads to remote code execution JoomShaper SP Page Builder · Sep 29, 2026
- CISA KEV
- EXPLOITED
- PoC PUBLIC
CRITICAL 9.8