CVE-2026-102803 Joomla Extension - j2commerce.com - Gift voucher and single-use coupon could pay for more than one order in J2Store 6.0.0 - 6.6.5

Joomla Extension - j2commerce.com - Gift voucher and single-use coupon could pay for more than one order in J2Store 6.0.0 - 6.6.5 - A logged-in customer could redeem a single gift voucher, or a single-use coupon maxuses / maxcustomeruses = 1, on more than one order. By starting several checkout...

CVE-2026-102803

The Joomla extension J2Store versions 6.0.0 through 6.6.5 is vulnerable to a Time-of-check Time-of-use (TOCTOU) race condition. A logged-in customer can redeem a single gift voucher or a single-use coupon (where max_uses or max_customer_uses is 1) for multiple orders. This occurs because the syst...

EUVD-2026-121312

Joomla Extension - j2commerce.com - Gift voucher and single-use coupon could pay for more than one order in J2Store 6.0.0 - 6.6.5 - A logged-in customer could redeem a single gift voucher, or a single-use coupon maxuses / maxcustomeruses = 1, on more than one order. By starting several checkout...

CVE-2026-102803: j2commerce.com J2Store extension for Joomla: Joomla Extension - j2commerce.com - Gift voucher and single-use coupon could pay for more than one order in J2Store…

Joomla Extension - j2commerce.com - Gift voucher and single-use coupon could pay for more than one order in J2Store 6.0.0 - 6.6.5 - A logged-in customer could redeem a single gift voucher, or a single-use coupon maxuses / maxcustomeruses = 1, on more than one order. By starting several checkout...

PT-2026-53677

Hi.Events through 1.9.0 contains a promo code validation vulnerability where reservation validates usage count before asynchronous UpdateEventStatisticsJob increments it, allowing attackers to redeem limited promo codes unlimited times. Attackers can sequentially reserve multiple orders with the...