ollyo records
5 published records for vendor ollyo.
Researcher profile
- Entered KEV
- 1 · 20%
- Weaponized
- 1 · 20%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- 17 days
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-284 Improper Access Control1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-862 Missing Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
97Now | CVE-2026-48908Weaponized | Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2ollyo · sp page builder · CWE-434 | Critical10.0 | KEV | 89.1% | Jun 20, 2026 |
35Monitor | CVE-2026-57830Proof of concept | Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7ollyo · helix ultimate · CWE-862 | High8.8 | — | 0.4% | Jul 13, 2026 |
34Monitor | CVE-2026-57829Proof of concept | Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7ollyo · helix ultimate · CWE-79 | High8.7 | — | 0.2% | Jul 13, 2026 |
30Monitor | CVE-2026-49049Proof of concept | Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handlerollyo · helix3 · CWE-284 | High7.5 | — | 0.9% | Jun 29, 2026 |
21Monitor | CVE-2026-102426No exploit | Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2ollyo · sp page builder · CWE-79 | Medium5.3 | — | 0.1% | Oct 5, 2026 |
- CVE-2026-4890897Now
Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2
CriticalCVSS 10.0KEVWeaponizedEPSS 89%ollyo · sp page builderJun 20, 2026
- CVE-2026-5783035Monitor
Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7
HighCVSS 8.8Proof of conceptEPSS 0%ollyo · helix ultimateJul 13, 2026
- CVE-2026-5782934Monitor
Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7
HighCVSS 8.7Proof of conceptEPSS 0%ollyo · helix ultimateJul 13, 2026
- CVE-2026-4904930Monitor
Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler
HighCVSS 7.5Proof of conceptEPSS 0%ollyo · helix3Jun 29, 2026
- CVE-2026-10242621Monitor
Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2
MediumCVSS 5.3No exploitEPSS 0%ollyo · sp page builderOct 5, 2026