VulnSocial

CVE-2026-65761Disclosure

MEDIUMCVSS 9.3 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions.

Back to dashboard
4.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-89

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • Patch or workaround signal is available
  • 5 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 2 signals
  • PoC mentioned or linked in 3 signals
  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 5 signals
  • Disclosure: 3 classified signals
  • Peaked 2d ago at 2 mentions (2026-07-23); latest day: 1
  • 5 total mentions across 3 days

Deep dive

Activity timeline5 mentions / 3d
01122Mentions · 2026-07-23: 2Mentions · 2026-07-24: 2Mentions · 2026-08-26: 1PoC Mentioned / Linked · 2026-07-24: 2PoC Mentioned / Linked · 2026-08-26: 1Exploit Tool / Code · 2026-07-24: 2Patch / Workaround · 2026-07-23: 2Technical Details · 2026-07-23: 2Technical Details · 2026-07-24: 2Technical Details · 2026-08-26: 107-2307-2408-26
Signal classification3 categories
Disclosure
360.0%
Exploit
120.0%
PoC
120.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-07-232
Disclosure2
2026-07-242
Exploit1PoC1
2026-08-261
Disclosure1
Full discourse5 posts
  • dbugs@ptdbugs
    Exploit

    A PoC/exploit has been discovered for vulnerability CVE-2026-65761 PT ID: PT-2026-64032 Vendor: Joomla Product: Easy Store extension for Joomla (http://joomshaper.com) Description: Joomla Extension - http://joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions. References: • https://dbugs.ptsecurity.com/vulnerability/PT-2026-64032 • https://github.com/shinthink/cve-2026-65761 #dbugs_vuln

    Post summary

    A Proof‑of‑Concept exploit for CVE‑2026‑65761 in Joomla’s Easy Store extension has been released, with a GitHub repository linking to functional code that demonstrates an unauthenticated SQL injection.

    0301232.6K
    3.4K followersView on X
  • ThreatWire@ThreatWire_
    PoC

    🚨 A public PoC has been released for CVE-2026-65761 affecting the Easy Store extension for Joomla. The flaw allows unauthenticated SQL injection, exposing the database, including credentials and user sessions. 🔗 https://github.com/shinthink/cve-2026-65761 #Joomla #SQLi #CVE #CyberSecurity

    Post summary

    A public PoC demonstrating unauthenticated SQL injection has been released on GitHub for CVE-2026-65761 affecting the Easy Store Joomla extension.

    01021225
    476 followersView on X
  • pdnuclei-bot@pdnuclei_bot
    Disclosure

    🚨 CVE-2026-65761 - critical 🚨 Joomla Easy Store - SQL Injection > Joomla Easy Store extension 1.0.0-2.0.1 contains an unauthenticated SQL injection cau... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-65761 @pdnuclei #NucleiTemplates #cve

    Post summary

    The tweet announces a critical unauthenticated SQL injection in Joomla Easy Store, provides a link to a Nuclei template for detection, but offers no exploit, patch, or evidence of active exploitation.

    00002235
    1.2K followersView on X
  • Upwind Security MDR@UpwindMDR
    Disclosure

    🚨High - EasyStore for Joomla Unauthenticated Payment/Order Forgery (CVE-2026-65759) JoomShaper's EasyStore extension for Joomla (versions 1.0.0 through 2.0.1) processes critical order and payment information, including payment/order states, from client-side input without server-side authorization. An unauthenticated attacker can therefore forge or manipulate the payment and order states of arbitrary orders - for example flipping an unpaid order to paid - resulting in direct financial fraud against the store. It pairs with the unauthenticated SQL injection (CVE-2026-65761) from the same disclosure. CVSS 8.7, integrity impact. 👉Affected: EasyStore 1.0.0-2.0.1. Update to the patched release from JoomShaper; if unavailable, restrict access or take the store offline.

    Post summary

    EasyStore Joomla extension (v1.0.0‑2.0.1) is vulnerable to unauthenticated payment/order forging (CVE‑2026‑65759) with a CVSS score of 8.7; a patched release is available, otherwise restrict access or shut down the store.

    0000079
    254 followersView on X
  • Upwind Security MDR@UpwindMDR
    Disclosure

    🚨Critical - EasyStore for Joomla Unauthenticated SQL Injection (CVE-2026-65761) JoomShaper's EasyStore e-commerce extension for Joomla (versions 1.0.0 through 2.0.1) improperly validates order parameters, allowing an unauthenticated remote attacker to perform SQL injection. Successful exploitation grants full database read access, including credentials and session data - enabling account and admin takeover and exposure of customer PII and order records. As an internet-facing storefront extension, exposed sites are prime targets for automated scanning. CVSS 9.3. 👉Affected: EasyStore 1.0.0-2.0.1. Update to the patched release from JoomShaper; if unavailable, restrict access to the extension.

    Post summary

    The EasyStore Joomla extension suffers from a critical unauthenticated SQL injection (CVE‑2026‑65761) that grants full database read access; a vendor patch is available.

    0000071
    254 followersView on X

Explore more

Back to dashboard