[ Vendor · 8 CVEs ]
joomshaper.com
CVEs affecting joomshaper.com published in the last 30 days, plus any joomshaper.com CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102426 | 5 Oct 2026 | CVSS 6.1 | joomshaper.com SP Page Builder (Pro) extension for JoomlaJoomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and… | |
| CVE-2026-90900 | 23 Sep 2026 | CVSS 5.3 | joomshaper.com Easy Store extension for JoomlaJoomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0 - The… | |
| CVE-2026-90901 | 23 Sep 2026 | CVSS 8.6 | joomshaper.com Easy Store extension for JoomlaJoomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0 - The media… | |
| CVE-2026-90902 | 23 Sep 2026 | CVSS 8.6 | joomshaper.com Easy Store extension for JoomlaJoomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 - The coupon… | |
| CVE-2026-90903 | 23 Sep 2026 | CVSS 7.2 | joomshaper.com Easy Store extension for JoomlaJoomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0 - The… | |
| CVE-2026-90904 | 23 Sep 2026 | CVSS 8.6 | joomshaper.com Easy Store extension for JoomlaJoomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0 - The… | |
| CVE-2026-90905 | 23 Sep 2026 | CVSS 7.2 | joomshaper.com Easy Store extension for JoomlaJoomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension 1.0.0-3.0.0 - The endpoint… | |
| CVE-2026-90899 | 23 Sep 2026 | CVSS 8.2 | joomshaper.com Easy Store extension for JoomlaJoomla Extension - joomshaper.com - Unauthenticated PII Exposure via IDOR in Guest Checkout in Easy Store extension 1.0.0-3.0.0 - The… |