ollyo has 2 CVEs on record. 1 was published in the last 90 days. The median CVSS is 8.0 (high), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 50% vs 1% corpus
- Median CVSS
- 8.0
- Publish → KEV
- —(1)
- Last 90 days
- 1 prev 1
2
Total CVEs
1
Critical
1
CISA KEV
1
Exploited
Worst active — by depth score
CVE-2026-48908Critical· 9.8A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.97CVE-2026-102426Medium· 6.1Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dc_filter_<fieldId> request parameter, split on the d…34
ollyo vulnerabilities
CVEs affecting ollyo, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-102426Medium· 6.1Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dc_filter_<fieldId> request parameter, split on the d…
Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dc_filter_<fieldId> request parameter, split on the d…
▾ Sunlitollyo · sp_page_builderEPSS 0.16%via NVD
CVE-2026-48908Critical· 9.8CISA KEVPoCA vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.
A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.
▾ Hadalollyo · sp_page_builderEPSS 89%via NVD