ES
Product
Easy Store extension for Joomla
10
CVEs
0
On KEV
9.3
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 1Low 0
Watch
Add Easy Store extension for Joomla to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-65759 | 8.7 | Jul 23 | Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 Affected: 1.0.0-2.0.1 |
| CVE-2026-90901 | 8.6 | Sep 23 | Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0 Affected: 1.0.0-3.0.0 |
| CVE-2026-90902 | 8.6 | Sep 23 | Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 Affected: 1.0.0-3.0.0 |
| CVE-2026-90904 | 8.6 | Sep 23 | Joomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0 Affected: 1.0.0-3.0.0 |
| CVE-2026-90899 | 8.2 | Sep 23 | Joomla Extension - joomshaper.com - Unauthenticated PII Exposure via IDOR in Guest Checkout in Easy Store extension 1.0.0-3.0.0 Affected: 1.0.0-3.0.0 |
| CVE-2026-90903 | 7.2 | Sep 23 | Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0 Affected: 1.0.0-3.0.0 |
| CVE-2026-90905 | 7.2 | Sep 23 | Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension 1.0.0-3.0.0 Affected: 1.0.0-3.0.0 |
Showing 7