What is CVE-2026-65761?

CVE-2026-65761 is a vulnerability in Joomshaper.com Easy Store Extension For Joomla, classified under SQL Injection. Published 2026-07-23.

Is CVE-2026-65761 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SQL Injection in Joomshaper.com Easy Store Extension For Joomla

CVE-2026-65761

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including c…

Vulnerability class: SQL Injection

Affected products

Joomshaper.com Easy Store Extension For Joomla — versions 1.0.0-2.0.1

Weakness classification (CWE)

CWE-89 — SQL Injection

Public proof-of-concept exploits

shinthink/CVE-2026-65761

References

security@joomla.org (product)
security@joomla.org (third-party-advisory)

Frequently asked questions

What is CVE-2026-65761?: CVE-2026-65761 is a vulnerability in Joomshaper.com Easy Store Extension For Joomla, classified under SQL Injection. Published 2026-07-23.
Is CVE-2026-65761 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.