CVE-2026-65759 in Easy Store Extension

الملخص

بحسب MITRE • 23/07/2026

Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 - Critical order and payment information, including states, are processed from client side input, enabling unauthenticated attackers to manipulate payment and order states of arbritrary orders.

Be aware that VulDB is the high quality source for vulnerability data.

• مسؤول: Joomla
• حجز: 22/07/2026
• إفشاء: 23/07/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-382762
• CPE: جاهز
• CWE: CWE-371 (مؤكد)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00000
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-65759
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-65759
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-65759/