Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	10.0	KEVEPSS 88%	CVE-2026-48908SP Page Builder extension for Joomla · Unrestricted Upload of File with Dangerous Type Critical10.0KEVEPSS 88%2026-06-20CVE Database V5CVE-2026-48908 A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code. KEVEPSS 88%Vulnerability joomshaper.net #cwe-284 #cwe-434	CVE Database V5	2026-06-20
Critical	9.5	EPSS 4.9%	CVE-2026-48909SP LMS extension for Joomla · Deserialization of Untrusted Data Critical9.5EPSS 4.9%2026-06-20CVE Database V5CVE-2026-48909 SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauthenticated remote attacker to execute arbitrary code on the server. EPSS 4.9%Vulnerability joomshaper.net #cwe-502	CVE Database V5	2026-06-20

Showing 1–2 of 2 results