CVE-2026-65761 – Joomla Extension – joomshaper.com – Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1

CVE ID :CVE-2026-65761

Published : July 23, 2026, 5:16 p.m. | 33 minutes ago

Description :Joomla Extension – joomshaper.com – Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 – Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions.

Severity: 9.3 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…