SP Page Builder (Free and Pro) extension for Joomla — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in SP Page Builder (Free and Pro) extension for Joomla, with AI-generated Chinese analysis, references, and POCs.

Vendor: joomshaper.com

CVE ID	Title	CVSS	Severity	Published
CVE-2026-81566	Joomla Extension - joomshaper.com - Missing Access Control in Menu Item Creation in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 CWE-284	5.1	Medium	2026-09-14
CVE-2026-81565	Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 CWE-22	6.9	Medium	2026-09-14
CVE-2026-81564	Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Rename Allowing Arbitrary File Rename in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 CWE-22	7.0	High	2026-09-14
CVE-2026-78375	Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in the Content Plugin of SP Page Builder (Free and Pro) 5.2.1 - 6.9.0 CWE-89	8.6	High	2026-09-14

All 4 known CVE vulnerabilities affecting SP Page Builder (Free and Pro) extension for Joomla with full Chinese analysis, references, and POCs where available.