Known Vulnerabilities for App-builder by Develar
Listed below are 10 of the newest known vulnerabilities associated with "App-builder" by "Develar".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65879 json | Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.... | Not Provided | 2026-07-27 | 2026-07-28 |
| CVE-2026-65878 json | Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1- Improper path validation ... | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-65877 json | Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of various ... | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-65876 json | Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of catid ... | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-65766 json | Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of order ... | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-65568 json | Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions. | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-65433 json | Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions. | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-63429 json | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `POST /api/upload` has no authentication guard, no globa... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-63428 json | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `completeSubmission` accepts a `hiddenFields: [{id, name... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-63048 json | Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla extension Page Builder CK is... | Not Provided | 2026-07-22 | 2026-07-23 |