What is GHSA-6wj2-f75q-5h9h?

GHSA-6wj2-f75q-5h9h is a security advisory published by GitHub Security Advisories with High severity. Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension...

Which CVE IDs does GHSA-6wj2-f75q-5h9h cover?

GHSA-6wj2-f75q-5h9h covers the following CVE IDs: CVE-2026-65759. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-6wj2-f75q-5h9hHigh

Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension...

Vendor

GitHub Security Advisories

Published

July 23, 2026

Last Modified

July 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-65759 →

📋 Description

Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 - Critical order and payment information, including states, are processed from client side input, enabling unauthenticated attackers to manipulate payment and order states of arbritrary orders.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-65759
https://mysites.guru/blog/easystore-security-disclosure
https://www.joomshaper.com/easystore
https://github.com/advisories/GHSA-6wj2-f75q-5h9h