Easy Store Extension For Joomla
Approved changes feed: RSS · Atom
cpe:2.3:a:joomshaper.com:easy_store_extension_for_joomla:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Joomshaper.Com (5a65d801-d404-5f04-86ed-c3e2990781fb) |
|---|---|
| Product | Easy Store Extension For Joomla (82f85df1-c5a8-51d0-a8da-c8c7bb67432b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-65761 |
vulnerable | 2026-07-29 01:06:20.243745 |
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions.
Published: 2026-07-23T16:38:58.787Z
Updated: 2026-08-12T13:53:01.925Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-65760 |
vulnerable | 2026-07-29 01:06:20.243603 |
Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1
Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to retreive order and customer information of any order in the system.
Published: 2026-07-23T16:38:21.882Z
Updated: 2026-08-12T13:52:10.918Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-65759 |
vulnerable | 2026-07-29 01:06:20.243300 |
Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1
Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 - Critical order and payment information, including states, are processed from client side input, enabling unauthenticated attackers to manipulate payment and order states of arbritrary orders.
Published: 2026-07-23T16:42:54.627Z
Updated: 2026-08-12T13:57:43.201Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.