Easy Store extension for Joomla vulnerabilities | LiveThreat CVE Feed

Product

Easy Store extension for Joomla

by joomshaper.com · last CVE Sep 23, 2026

CVEs

On KEV

9.3

Max CVSS

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 2High 7Medium 1Low 0

Severity

All severities10 Critical2 High7 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Easy Store extension for Joomla to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-65761	9.3	1%	Jul 23	Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 Affected: 1.0.0-2.0.1
CVE-2026-65760	9.2	0%	Jul 23	Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 Affected: 1.0.0-2.0.1
CVE-2026-65759	8.7	0%	Jul 23	Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 Affected: 1.0.0-2.0.1
CVE-2026-90901	8.6	0%	Sep 23	Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0 Affected: 1.0.0-3.0.0
CVE-2026-90902	8.6	0%	Sep 23	Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 Affected: 1.0.0-3.0.0
CVE-2026-90904	8.6	0%	Sep 23	Joomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0 Affected: 1.0.0-3.0.0
CVE-2026-90899	8.2	0%	Sep 23	Joomla Extension - joomshaper.com - Unauthenticated PII Exposure via IDOR in Guest Checkout in Easy Store extension 1.0.0-3.0.0 Affected: 1.0.0-3.0.0
CVE-2026-90903	7.2	0%	Sep 23	Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0 Affected: 1.0.0-3.0.0
CVE-2026-90905	7.2	0%	Sep 23	Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension 1.0.0-3.0.0 Affected: 1.0.0-3.0.0
CVE-2026-90900	5.3	0%	Sep 23	Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0 Affected: 1.0.0-3.0.0