Unrated severityNVD Advisory· Published Jul 23, 2026· Updated Jul 24, 2026
Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1
CVE-2026-65759
Description
Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 - Critical order and payment information, including states, are processed from client side input, enabling unauthenticated attackers to manipulate payment and order states of arbritrary orders.
Affected products
2- Range: 1.0.0-2.0.1
- Range: 1.0.0-2.0.1
Patches
Vulnerability mechanics
References
2- mysites.guru/blog/easystore-security-disclosure/mitrethird-party-advisory
- www.joomshaper.com/easystoremitreproduct
News mentions
0No linked articles in our index yet.