P.01CVE-2026-48908: SP Page Builder Zero-Day Hits Joomla Sites Hard
Two CVSS 10.0 zero-days in Joomla page builder plugins, SP Page Builder and Joomlack Page Builder, are being exploited to plant webshells and create rogue admin accounts. Here's what's affected and what to patch.











