Actively exploited vulnerabilities affecting JoomShaper products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-48908https://wildfortech.com/security#CVE-2026-48908This vulnerability in JoomShaper's SP Page Builder allows anyone on the internet — no login required — to upload arbitrary files, including PHP scripts, to an affected server. Once a malicious PHP file is uploaded and executed, an attacker effectively gains remote code execution on the web server. This makes it a critical risk for any organization running this Joomla plugin, as full server compromise is achievable without any authentication barrier.Tue, 07 Jul 2026 00:00:00 GMTJoomShaperSP Page Builder