EUVD-2026-77382
GHSA-h565-j474-wg73
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible, no auth required, no complexity; limited to minor integrity (form spam) and availability (automated submission volume) impacts only.
Primary rating from Vendor (joomla).
CVSS VectorVendor: joomla
Lifecycle Timeline
1DescriptionCVE.org
Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0 - The optin_form addon read the CAPTCHA type, the expected answer and the enabled flag from the request rather than from the stored addon configuration. Verification reduced to md5($captcha_question) != $captcha_answer with both operands supplied by the attacker, so any value passed.
AnalysisAI
Unauthenticated CAPTCHA bypass in SP Page Builder Pro (Joomla extension, versions 5.1.4-6.9.0) allows any remote attacker to defeat form bot-protection by supplying attacker-controlled CAPTCHA parameters directly in the HTTP request. The optin_form addon reads the CAPTCHA type, expected answer, and enabled flag from user-supplied request data instead of the server-stored configuration, reducing verification to a trivially solvable md5($captcha_question) == $captcha_answer check where the attacker supplies both operands. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The target Joomla site must have SP Page Builder Pro version 5.1.4-6.9.0 installed and must have at least one optin_form addon widget published on a page accessible to unauthenticated visitors. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 base score of 6.9 (AV:N/AC:L/AT:N/PR:N/UI:N) appropriately reflects the low-complexity, unauthenticated network vector, with limited impact (VI:L/VA:L) - there is no confidentiality exposure and no privilege escalation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade SP Page Builder Pro to the version above 6.9.0 released by joomshaper.com; consult the vendor's changelog at https://www.joomshaper.com/joomla-extensions/sp-page-builder-pro for the exact patched release number, as no specific fixed version is confirmed in the available intelligence. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today