Joomlack Page Builder Improper Access Control Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 07/07/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| page builder ck | < 3.6.0 | 3.6.0 |
Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free