Unauthenticated Comment Creation Vulnerability in SP Page Builder by JoomShaper
CVE-2026-67287

6.3MEDIUM

Key Information:

Vendor

Joomshaper.com

Status
Sp Page Builder Extension For Joomla
Vendor
CVE Published:
12 August 2026

What is CVE-2026-67287?

The SP Page Builder extension by JoomShaper is susceptible to an unauthenticated comment creation vulnerability, allowing attackers to submit comments on web pages that have disabled guest commenting. This occurs when an attacker manipulates the necessary input settings, bypassing restrictions and potentially leading to spam or malicious content being posted on the affected Joomla sites.

Affected Version(s)

SP Page Builder extension for Joomla 1.0.0-6.7.1

References

https://www.joomshaper.com/page-builder
product

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Murrez
.