CVE Catalog
CVE-2026-65760
CriticalCVSS 9.2Exploitation Probability (EPSS)
Low risk0.25%
16th percentile - higher than 16% of all known CVEs
Summary
Improper access checks in the Easy Store extension (versions 1.0.0-2.0.1) for Joomla allow logged-in users to retrieve order and customer information of any order in the system.
Risk Assessment
Logged-in users can access confidential data of other customers, violating privacy and potentially leading to information leakage.
Recommendation
Update the Easy Store extension to a version above 2.0.1 or apply the vendor's patch.
Original NVD description (English source)
Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to retreive order and customer information of any order in the system.