PT-2026-64030 · Joomshaper.Com · Easy Store Extension For Joomla

Phil Taylor · CVE-2026-65759 · Publicado 2026-07-23 · Atualizado 2026-07-23

Mitre

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 - Critical order and payment information, including states, are processed from client side input, enabling unauthenticated attackers to manipulate payment and order states of arbritrary orders.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2026-65759

Produtos afetados

Easy Store Extension For Joomla

Referências · 3

• https://joomshaper.com/easystore · Nota
• https://mysites.guru/blog/easystore-security-disclosure · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-65759 · Nota de Segurança