agentprime: j2commerce-com-j2store-extension-for-joomlaEvery new CVE for j2commerce-com-j2store-extension-for-joomla.https://agentprime.io/CVE-2026-82190: Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7https://agentprime.io/advisories/CVE-2026-82190/https://agentprime.io/advisories/CVE-2026-82190/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 18:54:21 GMTCVECVE-2026-78081: Joomla Extension - j2commerce.com - Missing CSRF protection on cart, checkout and myprofile controllers in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7https://agentprime.io/advisories/CVE-2026-78081/https://agentprime.io/advisories/CVE-2026-78081/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 18:52:46 GMTCVECVE-2026-81568: Joomla Extension - j2commerce.com - Arbitrary file read via `task=download` in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7https://agentprime.io/advisories/CVE-2026-81568/https://agentprime.io/advisories/CVE-2026-81568/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 18:50:53 GMTCVECVE-2026-82191: Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7https://agentprime.io/advisories/CVE-2026-82191/https://agentprime.io/advisories/CVE-2026-82191/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 18:50:47 GMTCVECVE-2026-81567: Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the storefront product list in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7https://agentprime.io/advisories/CVE-2026-81567/https://agentprime.io/advisories/CVE-2026-81567/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 18:49:01 GMTCVECVE-2026-82189: Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7https://agentprime.io/advisories/CVE-2026-82189/https://agentprime.io/advisories/CVE-2026-82189/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 18:46:54 GMTCVECVE-2026-78000: Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5https://agentprime.io/advisories/CVE-2026-78000/https://agentprime.io/advisories/CVE-2026-78000/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 11:59:29 GMTCVECVE-2026-78069: Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6https://agentprime.io/advisories/CVE-2026-78069/https://agentprime.io/advisories/CVE-2026-78069/CVSS 9.5 (Critical). Critical: CVSS score 9.5: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 11:59:12 GMTCVEcriticalCVE-2026-78065: Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user (IDOR) in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6https://agentprime.io/advisories/CVE-2026-78065/https://agentprime.io/advisories/CVE-2026-78065/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 11:59:02 GMTCVECVE-2026-77999: Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6https://agentprime.io/advisories/CVE-2026-77999/https://agentprime.io/advisories/CVE-2026-77999/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 11:58:00 GMTCVECVE-2026-78064: Joomla Extension - j2commerce.com - Anonymous cart-record tampering via inherited FOF `save` task in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6https://agentprime.io/advisories/CVE-2026-78064/https://agentprime.io/advisories/CVE-2026-78064/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 11:54:08 GMTCVECVE-2026-67361: Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5https://agentprime.io/advisories/CVE-2026-67361/https://agentprime.io/advisories/CVE-2026-67361/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 19:23:29 GMTCVECVE-2026-74252: Joomla Extension - j2commerce.com - Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5https://agentprime.io/advisories/CVE-2026-74252/https://agentprime.io/advisories/CVE-2026-74252/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 19:21:10 GMTCVECVE-2026-67358: Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5https://agentprime.io/advisories/CVE-2026-67358/https://agentprime.io/advisories/CVE-2026-67358/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 19:20:36 GMTCVECVE-2026-67362: Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5https://agentprime.io/advisories/CVE-2026-67362/https://agentprime.io/advisories/CVE-2026-67362/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 19:19:33 GMTCVECVE-2026-67359: Joomla Extension - j2commerce.com - Order content disclosure J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5https://agentprime.io/advisories/CVE-2026-67359/https://agentprime.io/advisories/CVE-2026-67359/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 19:18:44 GMTCVECVE-2026-67360: Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5https://agentprime.io/advisories/CVE-2026-67360/https://agentprime.io/advisories/CVE-2026-67360/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 19:16:36 GMTCVE