Vulnerability in Joomshaper.com Easy Store Extension For Joomla
CVE-2026-65759
Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 - Critical order and payment information, including states, are processed from client side input, enabling unauthenticated attackers to manipulate payment and order states of arbritrary orders.
EPSS: 0.004 (36.5th percentile) — read the EPSS interpretation.
Affected products
- Joomshaper.com Easy Store Extension For Joomla — versions 1.0.0-2.0.1
Weakness classification (CWE)
References
- security@joomla.org (product)
- security@joomla.org (third-party-advisory)