Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Vendors
J2commercecom
J2store Extension For Joomla

j2commerce.com J2Store extension for Joomla Vulnerabilities: CVEs, CISA KEV & Security Advisories

17 CVEs

JC

j2commerce.com J2Store extension for Joomla Vulnerabilities

CVE security advisories and vulnerability history for J2Store extension for Joomla by j2commerce.com.

17

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.4

Avg CVSS

2026–2026

Last updated September 15, 2026

Overview

j2commerce.com J2Store extension for Joomla has 17 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

Severity and exploitation

How the CVSS severity of j2commerce.com J2Store extension for Joomla's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High9

Medium7

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of j2commerce.com J2Store extension for Joomla's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No j2commerce.com J2Store extension for Joomla CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every j2commerce.com J2Store extension for Joomla version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

1.0.0-3.3.206 CVEs
1.0.0-3.3.226 CVEs
4.0.0-4.0.206 CVEs
4.0.0-4.0.226 CVEs
4.1.0-4.1.56 CVEs
4.1.0-4.1.76 CVEs
1.0.0-3.3.215 CVEs
4.0.0-4.0.215 CVEs
4.1.0-4.1.65 CVEs

Find a version

17 CVEs

Sort

Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7
CVE-2026-82190CWE-1241
Medium · CVSS 6.3
EPSS 0.3% (25th pct)2026-09-15
Joomla Extension - j2commerce.com - Missing CSRF protection on cart, checkout and myprofile controllers in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7
CVE-2026-78081CWE-352
High · CVSS 7.1
EPSS 0.2% (11th pct)2026-09-15
Joomla Extension - j2commerce.com - Arbitrary file read via `task=download` in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7
CVE-2026-81568CWE-22
High · CVSS 8.7
EPSS 0.5% (41th pct)2026-09-15
Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7
CVE-2026-82191CWE-1241
Medium · CVSS 5.3
EPSS 0.4% (37th pct)2026-09-15
Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the storefront product list in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7
CVE-2026-81567CWE-89
High · CVSS 8.7
EPSS 0.4% (31th pct)2026-09-15
Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7
CVE-2026-82189CWE-472
High · CVSS 8.7
EPSS 0.4% (36th pct)2026-09-15
Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5
CVE-2026-78000CWE-79
Medium · CVSS 5.3
EPSS 0.5% (45th pct)2026-09-03
Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6
CVE-2026-78069CWE-862
Critical · CVSS 9.5
EPSS 0.4% (33th pct)2026-09-03
Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user (IDOR) in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6
CVE-2026-78065CWE-639
High · CVSS 7.1
EPSS 0.4% (27th pct)2026-09-03
Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6
CVE-2026-77999CWE-472
High · CVSS 8.7
EPSS 0.4% (36th pct)2026-09-03
Joomla Extension - j2commerce.com - Anonymous cart-record tampering via inherited FOF `save` task in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6
CVE-2026-78064CWE-639
High · CVSS 8.8
EPSS 0.4% (33th pct)2026-09-03
Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5
CVE-2026-67361CWE-352
Medium · CVSS 6.9
EPSS 0.2% (11th pct)2026-08-21
Joomla Extension - j2commerce.com - Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5
CVE-2026-74252CWE-79
High · CVSS 8.6
EPSS 0.5% (43th pct)2026-08-21
Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5
CVE-2026-67358CWE-639
Medium · CVSS 5.3
EPSS 0.2% (8th pct)2026-08-21
Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5
CVE-2026-67362CWE-601
Medium · CVSS 5.1
EPSS 0.5% (44th pct)2026-08-21
Joomla Extension - j2commerce.com - Order content disclosure J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5
CVE-2026-67359CWE-639
High · CVSS 8.7
EPSS 0.4% (33th pct)2026-08-21
Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5
CVE-2026-67360CWE-639
Medium · CVSS 6.3
EPSS 0.4% (33th pct)2026-08-21

Common weakness types

The CWE weakness categories most often found in j2commerce.com J2Store extension for Joomla CVEs. Follow any weakness for its full explanation.

CWE-639Authorization Bypass Through User-Controlled Key5 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-472External Control of Assumed-Immutable Web Parameter2 CVEs
CWE-1241Use of Predictable Algorithm in Random Number Generator2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1 CVE
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVE
CWE-601URL Redirection to Untrusted Site ('Open Redirect')1 CVE

Other j2commerce.com products

Browse vulnerabilities for other products by j2commerce.com.

All j2commerce.com vulnerabilities

Frequently asked questions

Common questions about j2commerce.com J2Store extension for Joomla vulnerabilities.

How many CVEs does j2commerce.com J2Store extension for Joomla have?: j2commerce.com J2Store extension for Joomla has 17 published CVE records since 2026.
How many j2commerce.com J2Store extension for Joomla CVEs are in CISA KEV?: None of j2commerce.com J2Store extension for Joomla's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for j2commerce.com J2Store extension for Joomla vulnerabilities?: No j2commerce.com J2Store extension for Joomla CVEs currently have a tracked public exploit in this dataset.
Which versions of j2commerce.com J2Store extension for Joomla are affected?: 9 distinct j2commerce.com J2Store extension for Joomla versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in j2commerce.com J2Store extension for Joomla CVEs?: j2commerce.com J2Store extension for Joomla's CVEs most often map to these CWE weakness types: CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-472 (External Control of Assumed-Immutable Web Parameter), CWE-1241 (Use of Predictable Algorithm in Random Number Generator).
How many critical j2commerce.com J2Store extension for Joomla vulnerabilities are there?: j2commerce.com J2Store extension for Joomla has 1 critical and 9 high-severity CVEs.
What is the average severity of j2commerce.com J2Store extension for Joomla CVEs?: The average CVSS base score across j2commerce.com J2Store extension for Joomla's scored CVEs is 7.4.

References

All j2commerce.com vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track j2commerce.com J2Store extension for Joomla vulnerabilities

Get an alert for each new j2commerce.com J2Store extension for Joomla CVE, with AI-written analysis and remediation steps.

Create an account See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Other products
FAQ
References