PT-2026-64030 · Joomshaper.Com · Easy Store Extension For Joomla

Phil Taylor · CVE-2026-65759 · Published 2026-07-23 · Updated 2026-07-23

Mitre

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 - Critical order and payment information, including states, are processed from client side input, enabling unauthenticated attackers to manipulate payment and order states of arbritrary orders.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-65759

Affected Products

Easy Store Extension For Joomla

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-65759 · Security Note
• https://joomshaper.com/easystore · Note
• https://mysites.guru/blog/easystore-security-disclosure · Note