Still hack attacks vis sp page builder - Forum | JoomShaper
Solved SP Page Builder

Still hack attacks vis sp page builder

Asked by Matthias Heymann 3 months ago Last activity 3 months ago

During the last days, we encounter hack attacks on this file:
/index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon

So far, our htaccess blocked it, but maybe you have a look at possible security holes here.

Accepted answer

Marked as the solution
Matthias Heymann Asked this
3 months ago

I had updated already to 6.6.2.before these attempts. Good to know, that this problem was fixed already.

Rashida Rahman Staff
3 months ago

Thanks, have a nice day!

3 more replies

Oldest first Newest first Most helpful
Pascal - HTProtect.org
3 months ago

They keep trying, but these requests won't achieve anything. As long as your site is up to date, you can safely ignore them.

Rashida Rahman Staff
3 months ago

Hi there!

Thanks for reaching out.

The asset.uploadCustomIcon endpoint has been secured in the latest SP Page Builder v6.6.2.

If you've already updated to SP Page Builder 6.6.2, performed a thorough security check of your website, and ensured your site is protected with appropriate security measures, you can safely ignore these blocked requests. They are most likely automated attempts to exploit known vulnerabilities on publicly accessible websites.

If you haven't updated yet, we strongly recommend upgrading to SP Page Builder 6.6.2 as soon as possible and taking a full backup before performing the update.

Best regards,

Log in to reply.