CVE-2026-48908-by-yora

🔐 CVE-2026-48908 스캐너 및 안전한 PoC Joomla SP Page Builder — 인증되지 않은 파일 업로드 / 잠재적 RCE yora 개발 📌 소개 이 프로젝트는 yora 가 개발한 보안 연구 및 취약점 탐지 도구 로, Joomla용 SP Page Builder 에 영향을 미치는 CVE-2026-48908 을 식별하는 데 도움을 주기 위한 것입니다. 이 취약점은 인증되지 않은 파일 업로드 메커니즘과 관련이 있습니다. 취약한 조건에서는 공격자가 예상치 못한 파일 형식을 업로드할 수 있으며, 이로 인해 잠재적으...

cve-2025-22294

CVE-2025-2294 – Local File Inclusion LFI в WordPress-плагине Kubio AI Page Builder Ссылка на подробный райтап Ссылка на деплой Ссылка на сплойт Ссылка на файлы, для массовой проверки: Шаблон для активной проверки...

CVE-2026-81429

The Export & Import WPBakery Page Builder WordPress plugin through 1.0.2 does not perform any CSRF check on its template-import feature and does not sanitise the imported data before storing it and echoing it back, allowing attackers to make a logged-in administrator import a crafted template via...

EUVD-2026-76785

The Export & Import WPBakery Page Builder WordPress plugin through 1.0.2 does not perform any CSRF check on its template-import feature and does not sanitise the imported data before storing it and echoing it back, allowing attackers to make a logged-in administrator import a crafted template via...

CVE-2026-81429

The Export & Import WPBakery Page Builder WordPress plugin through version 1.0.2 is affected by a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the absence of a CSRF check on the template-import feature combined with insufficient sanitization of imported data before storage a...

CVE-2026-81429 Export & Import WPBakery Page Builder <= 1.0.2 - Stored XSS via CSRF

The Export & Import WPBakery Page Builder WordPress plugin through 1.0.2 does not perform any CSRF check on its template-import feature and does not sanitise the imported data before storing it and echoing it back, allowing attackers to make a logged-in administrator import a crafted template via...

EVCer

EVCer | CVE-2023-0159 - WPBakery 페이지 빌더용 Extensive VC Addons CVE-2023-0159 - Extensive VC Addons for WPBakery page builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh...

CVE-2026-48908

CVE-2026-48908 — SP Page Builder Joomla Неаутентифицированное RCE Эксплойт proof-of-concept для CVE-2026-48908 , критической CVSS 4.0 = 10.0 неаутентифицированной уязвимости удаленного выполнения кода в компоненте SP Page Builder comsppagebuilder для Joomla от JoomShaper...

Page Builder CK <= 3.5.10 - Unauthenticated Arbitrary File Upload

Joomla Page Builder CK contains an unrestricted file upload vulnerability caused by lack of proper validation, letting unauthenticated attackers upload executable files and achieve remote code execution. id: CVE-2026-56290 info: name: Page Builder CK = 3.5.10 - Unauthenticated Arbitrary File Uplo...

CVE-2026-62110

Contributor Cross Site Scripting XSS in Bold Page Builder = 5.9.9 versions...

EUVD-2026-76210

Contributor Cross Site Scripting XSS in Bold Page Builder = 5.9.9 versions...

CVE-2026-62110 WordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Bold Page Builder = 5.9.9 versions...

CVE-2026-62110

Contributor Cross Site Scripting XSS in Bold Page Builder = 5.9.9 versions...

CVE-2025-2294

Kubio Page Builder LFI Exploit CVE-2025-2294 Эксплойт для Local File Inclusion LFI в плагине WordPress Kubio Page Builder версии ≤ 2.5.1. 📌 Описание Этот инструмент эксплуатирует неаутентифицированную уязвимость LFI в плагине Kubio Page Builder CVE-2025-2294, позволяя злоумышленникам читать...

CVE-2025-2294

Эксплойт CVE-2025-4403 Подробности Опубликовано : 27 марта 2025 г. Обновлено : 28 марта 2025 г. Серьёзность : Критическая оценка CVSS: 9.8 CWE : CWE-22: CWE-22 Некорректное ограничение пути к каталогу обход каталога Затронутые версии : Все версии от н/д до 2.5.1 включительно Исследователь :...

WordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LevinityCyber in WordPress Plugin Bold Page Builder versions = 5.9.9...

CVE-2026-48908-SP-Page-Builder-Joomla

CVE-2026-48908: SP Page Builder Joomla Неаутентифицированное RCE Доказательство концепции эксплуатации CVE-2026-48908, неаутентифицированной уязвимости удалённого выполнения кода в компоненте SP Page Builder для Joomla. Обзор уязвимости CVE-2026-48908 — критическая уязвимость безопасности,...

CVE-2026-78374

Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension 2.3.0 - The front-end JSON editor endpoint exposes an action called contact that requires no authentication, no CSRF token, no captcha when no captcha plugin is enabled and has no rate limitin...

CVE-2026-78374

T4 Page Builder (by joomlart.com) for Joomla, versions prior to 2.3.0 , is vulnerable to an open mail relay via its front-end JSON editor endpoint. The exposed contact action requires no authentication, no CSRF token, no captcha (when no captcha plugin is enabled), and has no rate limiting. An at...

CVE-2026-78374 Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension < 2.3.0

Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension 2.3.0 - The front-end JSON editor endpoint exposes an action called contact that requires no authentication, no CSRF token, no captcha when no captcha plugin is enabled and has no rate limitin...