Information disclosure in Joomshaper.com Easy Store Extension For Joomla
CVE-2026-65760
Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to retreive order and customer information of any order in the system.
Vulnerability class: Information Disclosure
EPSS: 0.004 (35.4th percentile) — read the EPSS interpretation.
Affected products
- Joomshaper.com Easy Store Extension For Joomla — versions 1.0.0-2.0.1
Weakness classification (CWE)
References
- security@joomla.org (product)
- security@joomla.org (third-party-advisory)