j2commerce.com vulnerabilities

Newest CVEs

• CVE-2026-82190

  Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7

  j2commerce.com · J2Store extension for Joomla

  Medium6.3
• CVE-2026-78081

  Joomla Extension - j2commerce.com - Missing CSRF protection on cart, checkout and myprofile controllers in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7

  j2commerce.com · J2Store extension for Joomla

  High7.1
• CVE-2026-81568

  Joomla Extension - j2commerce.com - Arbitrary file read via `task=download` in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7

  j2commerce.com · J2Store extension for Joomla

  High8.7
• CVE-2026-82191

  Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7

  j2commerce.com · J2Store extension for Joomla

  Medium5.3
• CVE-2026-81567

  Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the storefront product list in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7

  j2commerce.com · J2Store extension for Joomla

  High8.7
• CVE-2026-82189

  Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7

  j2commerce.com · J2Store extension for Joomla

  High8.7
• CVE-2026-78000

  Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5

  j2commerce.com · J2Store extension for Joomla

  Medium5.3
• CVE-2026-78069

  Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6

  j2commerce.com · J2Store extension for Joomla

  Critical9.5
• CVE-2026-78065

  Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user (IDOR) in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6

  j2commerce.com · J2Store extension for Joomla

  High7.1
• CVE-2026-77999

  Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6

  j2commerce.com · J2Store extension for Joomla

  High8.7