CVE-2026-79700
MediumCVSS 6.9Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
In the SP Page Builder Pro extension (versions 5.1.4 - 6.9.0), the optin_form addon read the CAPTCHA type, expected answer, and enabled flag from the request rather than from the stored addon configuration. Verification reduced to md5($captcha_question) != $captcha_answer with both operands supplied by the attacker, allowing unauthenticated CAPTCHA bypass.
Risk Assessment
An attacker can bypass the CAPTCHA mechanism, enabling automation of attacks such as mass form submissions, spam, or brute force. The risk is high as it requires no authentication.
Recommendation
Update SP Page Builder Pro to a version newer than 6.9.0 that contains the fix. Until then, consider disabling the optin_form addon or implementing additional server-side protections.
Other vulnerabilities in SP Page Builder Pro
See all- CVE-2026-102426Medium
In the Dynamic Content Filter addon in SP Page Builder Pro versions 3.0.0–5.6.1p2, there is reflected XSS. The slider minimum and maximum values are taken from the dc_filter_<fieldId> parameter, split on "l-r", HTML-escaped inside the data-value attribute, and then echoed without escaping as the span element's text content.
- CVE-2026-79701Medium
Joomla extension SP Page Builder Pro contains a vulnerability that allows bypassing CAPTCHA in Contact, Opt-in and Form Builder addons. An attacker can send a request with view_type=module and any token, causing CAPTCHA verification to be skipped.
Original NVD description (English source)
Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0 - The optin_form addon read the CAPTCHA type, the expected answer and the enabled flag from the request rather than from the stored addon configuration. Verification reduced to md5($captcha_question) != $captcha_answer with both operands supplied by the attacker, so any value passed.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS