Skip to contentJoomshaper.com Easy Store Extension For Joomla vulnerabilities
- joomshaper.com easy store extension for joomlaJoomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0CVE-2026-909037.2 High
- joomshaper.com easy store extension for joomlaJoomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0CVE-2026-909018.6 High
- joomshaper.com easy store extension for joomlaJoomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension 1.0.0-3.0.0CVE-2026-909057.2 High
- joomshaper.com easy store extension for joomlaJoomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0CVE-2026-909028.6 High
- joomshaper.com easy store extension for joomlaJoomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0CVE-2026-909048.6 High
- joomshaper.com easy store extension for joomlaJoomla Extension - joomshaper.com - Unauthenticated PII Exposure via IDOR in Guest Checkout in Easy Store extension 1.0.0-3.0.0CVE-2026-908998.2 High
- joomshaper.com easy store extension for joomlaJoomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0CVE-2026-909005.3 Medium
- joomshaper.com easy store extension for joomlaJoomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1CVE-2026-657598.7 High
- joomshaper.com easy store extension for joomlaJoomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1CVE-2026-65761Public exploit9.3 Critical
- joomshaper.com easy store extension for joomlaJoomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1CVE-2026-657609.2 Critical