Improper Access Control in Easy Store Extension by JoomShaper
CVE-2026-65760

9.2CRITICAL

Key Information:

Vendor

Joomshaper.com

Status
Easy Store Extension For Joomla
Vendor
CVE Published:
23 July 2026

What is CVE-2026-65760?

The Easy Store extension by JoomShaper has a significant security flaw that permits logged-in users to access sensitive order and customer information from any order within the system due to insufficient access control measures.

Affected Version(s)

Easy Store extension for Joomla 1.0.0-2.0.1

References

https://www.joomshaper.com/easystore
product
https://mysites.guru/blog/easystore-security-disclosure/
third-party-advisory

CVSS V4

Score:
9.2
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Phil Taylor
.