CVE-2026-65759

Vulnerability Description

Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 - Critical order and payment information, including states, are processed from client side input, enabling unauthenticated attackers to manipulate payment and order states of arbritrary orders.

Vulnerability Details

Published Date

July 23, 2026

Last Modified

July 23, 2026

CWE ID

CWE-284

Source

NVD

Vendor

joomshaper.com

Product

Easy Store extension for Joomla

External References

https://mysites.guru/blog/easystore-security-disclosure/
https://www.joomshaper.com/easystore

CVE-2026-65759

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment