Exploited: 178
LatestCVE-2026-115732 — Certificate Name Authorization Bypass
VulnFeed.org
AREN

joomshaper.com Helix Ultimate extension for Joomla vulnerabilities and fixes

Exploited and high-severity joomshaper.com Helix Ultimate extension for Joomla vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 8.6CVE-2026-103419Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.Verify fixjoomshaper.com Helix Ultimate extension for Joomla
    1 min read
  2. 8.6CVE-2026-105602Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.Verify fixjoomshaper.com Helix Ultimate extension for Joomla
    1 min read
Esc