What’s Vulnerable › Products

joomshaper.com Easy Store extension for Joomla vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your joomshaper.com Easy Store extension for Joomla version is affected

Latest joomshaper.com Easy Store extension for Joomla vulnerabilities

• CVE-2026-90905 — Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension 1.0.0-3.0.0 (CVSS 7.2)
• CVE-2026-90904 — Joomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0 (CVSS 8.6)
• CVE-2026-90903 — Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0 (CVSS 7.2)
• CVE-2026-90902 — Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 (CVSS 8.6)
• CVE-2026-90901 — Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0 (CVSS 8.6)
• CVE-2026-90900 — Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0 (CVSS 5.3)
• CVE-2026-90899 — Joomla Extension - joomshaper.com - Unauthenticated PII Exposure via IDOR in Guest Checkout in Easy Store extension 1.0.0-3.0.0 (CVSS 8.2)
• CVE-2026-65761 — Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 (CVSS 9.3)
• CVE-2026-65760 — Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 (CVSS 9.2)
• CVE-2026-65759 — Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 (CVSS 8.7)