CVE-2026-65761Suited to automated attack · CISA
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1
CVSS score
9.3
EPSS probability
%1.0
Risk score
0.1
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
EasyStore Joomla Pre-Auth SQL Injection via filter_sortby Direction (CVE-2026-65761, CVSS 9.3) (★0)
Makefile Go / Python
GitHub
Proof of Concept for CVE-2026-65761 - EasyStore Pro Unauthenticated SQL Injection via `filter_sortby` (★0)
Makefile Go / Python
Nuclei: Joomla Easy Store - SQL Injection
Makefile Go / Python
Similar Vulnerabilities
7.5
CVE-2026-49049Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler
Patch status unknown Public Exploits:7EPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-65761"