Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-79700

SP Page Builder (Pro) extension for Joomla · Vulnerability

CVSS 4.0 6.9 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-79700

Published

Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0 - The optin_form addon read the CAPTCHA type, the expected answer and the enabled flag from the request rather than from the stored addon configuration. Verification reduced to md5($captcha_question) != $captcha_answer with both operands supplied by the attacker, so any value passed.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-79700

Published

SP Page Builder (Pro) extension for Joomla

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "product": "SP Page Builder (Pro) extension for Joomla",
                    "vendor": "joomshaper.com",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "5.1.4 - 6.9.0"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON