Расширение: Easy Store

Критическая CVSS 9.3

CVE-2026-65761

РасширениеEasy Store

Разработчикjoomshaper.com

Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read acce…

23.07.2026 Требует внимания

Критическая CVSS 9.2

CVE-2026-65760

РасширениеEasy Store

Разработчикjoomshaper.com

cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to retreive order and customer information of any…

23.07.2026 Требует внимания

Высокая CVSS 8.7

CVE-2026-65759

РасширениеEasy Store

Разработчикjoomshaper.com

unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 - Critical order and payment information, including states, are processed from client side input, enabling unauthen…

23.07.2026 Требует внимания