CVE-2026-58078 HIGH

CVE-2026-58078: Joomla Extension - themexpert.com - Unauthenticated SQL injection in Quix Page Builder Pro < 6.2.1

Vendor Themexpert.com
Product Quix Page Builder Pro extension for Joomla
Weakness CWE-89 · SQLi
Published July 16, 2026
Last update July 17, 2026
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

The Joomla extension Quix Page Builder Pro is vulnerable to an unauthenticated SQL injection.

Key dates

02Disclosure timeline

July 16, 2026 CVE published
July 17, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-14029 Groundhogg <= 4.5.8 - Authenticated (Custom+) SQL Injection via 'select' Parameter CVE-2026-12920 Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Administrator+) SQL Injection via 's' Parameter CVE-2026-56068 WordPress JetEngine plugin <= 3.8.10.2 - SQL Injection vulnerability CVE-2026-40798 WordPress wpForo Forum plugin <= 3.0.4 - SQL Injection vulnerability CVE-2026-57667 WordPress Groundhogg plugin <= 4.5 - SQL Injection vulnerability