CVE-2026-65759

UNKNOWN 0.0

Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 - Critical order and payment information, including states, are processed from client side input, enabling unauthenticated attackers to manipulate payment and order states of arbritrary orders.

CWE	CWE-284
Vendor	joomshaper.com
Product	easy store extension for joomla
Published	Jul 23, 2026

Stay Ahead of the Next One

Get instant alerts for joomshaper.com easy store extension for joomla

Be the first to know when new unknown vulnerabilities affecting joomshaper.com easy store extension for joomla are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

joomshaper.com / Easy Store extension for Joomla

1.0.0-2.0.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

joomshaper.com: https://www.joomshaper.com/easystore mysites.guru: https://mysites.guru/blog/easystore-security-disclosure/

Credits

Phil Taylor