CVE-2026-65761 in Easy Store Extension

Sumário

de MITRE • 23/07/2026

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsável: Joomla
• Reservar: 22/07/2026
• Divulgação: 23/07/2026
• Moderação: aceite
• Entrada: VDB-382757
• CPE: pronto
• CWE: CWE-89 (confirmado)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00237
• KEV: não
• Atividades: baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-65761
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-65761
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-65761/