Advisories · Technology
joomshaper.com Easy Store extension for Joomla.
Every CVE that names joomshaper.com Easy Store extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0
- joomshaper.com Easy Store extension for Joomla
- Cross-site request forgery (CSRF)
- CVSS 8.6 High
Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0
- joomshaper.com Easy Store extension for Joomla
- SQL injection
- CVSS 7.2 High
Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension 1.0.0-3.0.0
- joomshaper.com Easy Store extension for Joomla
- Broken access control
- Cross-site request forgery (CSRF)
- CVSS 8.6 High
Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0
- joomshaper.com Easy Store extension for Joomla
- SQL injection
- CVSS 8.6 High
Joomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0
- joomshaper.com Easy Store extension for Joomla
- Broken access control
- CVSS 8.2 High
Joomla Extension - joomshaper.com - Unauthenticated PII Exposure via IDOR in Guest Checkout in Easy Store extension 1.0.0-3.0.0
- joomshaper.com Easy Store extension for Joomla
- Information disclosure
- Broken access control
- CVSS 5.3 Medium
Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0
- joomshaper.com Easy Store extension for Joomla
- Cross-site request forgery (CSRF)
- CVSS 8.7 High
Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1
- joomshaper.com Easy Store extension for Joomla
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1
- joomshaper.com Easy Store extension for Joomla
- SQL injection
- CVSS 9.2 CriticalCritical · CVSS 9+
Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1
- joomshaper.com Easy Store extension for Joomla
- Information disclosure
- Broken access control