Actively exploited vulnerabilities affecting Joomlack products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-56290https://wildfortech.com/security#CVE-2026-56290This vulnerability in Joomlack's Page Builder extension allows unauthenticated attackers to upload arbitrary files to a target system, which can lead directly to remote code execution. Because no login is required to exploit it, the attack surface is effectively anyone who can reach the web server. A successful exploit gives an attacker the ability to run malicious code on the server, potentially leading to full system compromise, data theft, or use as a pivot point for deeper network access.Tue, 07 Jul 2026 00:00:00 GMTJoomlackPage Builder