CVE-2026-82190

J2Store (a Joomla e-commerce extension by j2commerce.com) contains a predictable/forgeable order access token vulnerability affecting versions 1.0.0–3.3.2, 4.0.0–4.0.22, and 4.1.0–4.1.7 . Anyone who obtains the site's Joomla secret can compute a valid access token for any order without having pla...

CVE-2026-82190 Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7

Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Anyone who obtains the site's Joomla secret can compute a valid access token for any order on the site without ever having placed one, gaining guest access to that...