CVE WatchJul 23, 2026

CVE-2026-65761

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order paramet

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Jul 23, 2026 · Last modified: Jul 23, 2026 · CWE-89

EPSS · 30d

Not enough EPSS history yet.

Technical description

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-655327.6 HIG

—

——0Shop manager SQL Injection in Persian Woocommerce SMS <= 7.2.2 versions.3h CVE-2026-655268.5 HIG

—

——0Contributor SQL Injection in Visualizer <= 4.0.6 versions.3h CVE-2026-654947.1 HIG

—

——0Subscriber SQL Injection in Dokan Pro <= 5.0.2 versions.5h CVE-2026-654627.6 HIG

—

——0Administrator SQL Injection in Uncanny Automator <= 7.3.2 versions.4h CVE-2026-654548.5 HIG

—

——0Contributor SQL Injection in Quiz And Survey Master <= 11.2.0 versions.3h CVE-2026-654518.5 HIG

—

——0Contributor SQL Injection in MapSVG <= 8.14.0 versions.5h