joomshaper.com Helix Ultimate extension for Joomla

5 known vulnerabilities in joomshaper.com Helix Ultimate extension for Joomla, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-78079 CVSS 5.3 medium Joomla Extension - joomshaper.com - Open Redirect via Base64 Return Parameter in Helix Ultimate < 2.2.10 - Return redirect parameters…
  • CVE-2026-78078 CVSS 8.9 high Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 - Image uploads…
  • CVE-2026-78077 CVSS 8.6 high Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container & Embed Inputs in Helix Ultimate <…
  • CVE-2026-78076 CVSS 5.1 medium Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate < 2.2.10 - The…
  • CVE-2026-78075 CVSS 5.1 medium Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10 …