Helix Ultimate extension for Joomla — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Helix Ultimate extension for Joomla, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-78075	Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10 CWE-639	5.1	Medium	2026-08-31
CVE-2026-78076	Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate < 2.2.10 CWE-284	5.1	Medium	2026-08-31
CVE-2026-78078	Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 CWE-434	8.9	High	2026-08-31
CVE-2026-78077	Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container & Embed Inputs in Helix Ultimate < 2.2.10 CWE-79	8.6	High	2026-08-31
CVE-2026-78079	Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 CWE-601	5.3	Medium	2026-08-31
CVE-2026-57830	Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7 CWE-862	8.8	High	2026-07-13
CVE-2026-57829	Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7 CWE-79	8.7	High	2026-07-13

All 7 known CVE vulnerabilities affecting Helix Ultimate extension for Joomla with full Chinese analysis, references, and POCs where available.