<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: joomshaper-com-easy-store-extension-for-joomla</title><description>Every new CVE for joomshaper-com-easy-store-extension-for-joomla.</description><link>https://agentprime.io/</link><item><title>CVE-2026-90903: Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0</title><link>https://agentprime.io/advisories/CVE-2026-90903/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90903/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 18:43:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90901: Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0</title><link>https://agentprime.io/advisories/CVE-2026-90901/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90901/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 18:42:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90905: Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension 1.0.0-3.0.0</title><link>https://agentprime.io/advisories/CVE-2026-90905/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90905/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 18:42:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90902: Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0</title><link>https://agentprime.io/advisories/CVE-2026-90902/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90902/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 18:39:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90904: Joomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0</title><link>https://agentprime.io/advisories/CVE-2026-90904/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90904/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 18:37:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90899: Joomla Extension - joomshaper.com - Unauthenticated PII Exposure via IDOR in Guest Checkout in Easy Store extension 1.0.0-3.0.0</title><link>https://agentprime.io/advisories/CVE-2026-90899/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90899/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 18:36:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90900: Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0</title><link>https://agentprime.io/advisories/CVE-2026-90900/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90900/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 18:35:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-65759: Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1</title><link>https://agentprime.io/advisories/CVE-2026-65759/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-65759/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jul 2026 16:42:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-65761: Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1</title><link>https://agentprime.io/advisories/CVE-2026-65761/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-65761/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jul 2026 16:38:58 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-65760: Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1</title><link>https://agentprime.io/advisories/CVE-2026-65760/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-65760/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jul 2026 16:38:21 GMT</pubDate><category>CVE</category><category>critical</category></item></channel></rss>