CVE-2026-79700: joomshaper.com SP Page Builder (Pro) extension for

Описание

Оригинално описание

Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0 - The optin_form addon read the CAPTCHA type, the expected answer and the enabled flag from the request rather than from the stored addon configuration. Verification reduced to md5($captcha_question) != $captcha_answer with both operands supplied by the attacker, so any value passed.

Засегнати продукти

• joomshaper.com SP Page Builder (Pro) extension for Joomla: 5.1.4 - 6.9.0

Вид слабост

• CWE-807 Reliance on Untrusted Inputs in a Security Decision

История

Други уязвимости в joomshaper.com SP Page Builder (Pro) extension for Joomla

• 5.3CVE-2026-102426
• 6.9CVE-2026-79701

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-79700
• https://nvd.nist.gov/vuln/detail/CVE-2026-79700
• https://www.joomshaper.com/joomla-extensions/sp-page-builder-pro