CVE Catalog
CVE-2026-65879
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.15%
4th percentile - higher than 4% of all known CVEs
Summary
Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1. The hardcoded secret allowed attackers to forge the mail from address of forms.
Risk Assessment
This allows attackers to send emails with a forged sender address, which can be used for phishing or other social engineering attacks.
Recommendation
Upgrade SP Page Builder to version 6.7.1 or later and remove hardcoded secrets from the code.
Original NVD description (English source)
Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 - A hardcoded secret allowed attackers to forge the mail from address of forms.