CVE-2026-65761
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions.
| CWE | CWE-89 |
| Vendor | joomshaper.com |
| Product | easy store extension for joomla |
| Published | Jul 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for joomshaper.com easy store extension for joomla
Be the first to know when new unknown vulnerabilities affecting joomshaper.com easy store extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
joomshaper.com / Easy Store extension for Joomla
1.0.0-2.0.1
References
Credits
Phil Taylor