{"schema_version":1,"title":"J2commerce.com J2Store vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 16 vulnerabilities in J2commerce.com J2Store: 0 in the last 7 days and 16 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-82191, was published on 15 September 2026.","url":"https://junglewise.ai/threats/technologies/j2store","json_url":"https://junglewise.ai/threats/technologies/j2store.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/j2store","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":16,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":11,"last_90_days":16,"last_365_days":16},"latest":[{"cve":"CVE-2026-82191","cvss":2.7,"epss":0.0045,"slug":"cve-2026-82191-j2store-paypal-parameter-injection-in-redirect","title":"J2Store PayPal parameter injection in redirect","severity":"info","exploited":false,"published_at":"2026-09-15T19:17:42.237+00:00","url":"https://junglewise.ai/threats/cve-2026-82191-j2store-paypal-parameter-injection-in-redirect"},{"cve":"CVE-2026-82190","cvss":0,"epss":0.0033,"slug":"cve-2026-82190-j2store-predictable-order-access-token","title":"J2Store predictable order access token","severity":"info","exploited":false,"published_at":"2026-09-15T19:17:42.11+00:00","url":"https://junglewise.ai/threats/cve-2026-82190-j2store-predictable-order-access-token"},{"cve":"CVE-2026-82189","cvss":7.5,"epss":0.0043,"slug":"cve-2026-82189-j2store-order-status-manipulation-via-unauthenticated-request","title":"J2Store order status manipulation via unauthenticated request","severity":"info","exploited":false,"published_at":"2026-09-15T19:17:41.98+00:00","url":"https://junglewise.ai/threats/cve-2026-82189-j2store-order-status-manipulation-via-unauthenticated-request"},{"cve":"CVE-2026-81568","cvss":6.5,"epss":0.005,"slug":"cve-2026-81568-j2store-arbitrary-file-read-via-path-traversal-in-download","title":"J2Store arbitrary file read via path traversal in download handler","severity":"info","exploited":false,"published_at":"2026-09-15T19:17:41.073+00:00","url":"https://junglewise.ai/threats/cve-2026-81568-j2store-arbitrary-file-read-via-path-traversal-in-download"},{"cve":"CVE-2026-81567","cvss":7.5,"epss":0.0039,"slug":"cve-2026-81567-j2store-sql-injection-in-storefront-product-list","title":"J2Store SQL injection in storefront product list","severity":"info","exploited":false,"published_at":"2026-09-15T19:17:40.947+00:00","url":"https://junglewise.ai/threats/cve-2026-81567-j2store-sql-injection-in-storefront-product-list"},{"cve":"CVE-2026-78081","epss":0.0021,"slug":"cve-2026-78081-j2commerce-j2store-missing-csrf-protection-in-checkout","title":"J2Commerce J2Store missing CSRF protection in checkout controllers","severity":"info","exploited":false,"published_at":"2026-09-15T19:17:39.607+00:00","url":"https://junglewise.ai/threats/cve-2026-78081-j2commerce-j2store-missing-csrf-protection-in-checkout"},{"cve":"CVE-2026-78069","epss":0.0041,"slug":"cve-2026-78069-j2store-missing-authorization-in-apps-controller","title":"J2Store missing authorization in Apps controller","severity":"info","exploited":false,"published_at":"2026-09-03T13:06:09.327+00:00","url":"https://junglewise.ai/threats/cve-2026-78069-j2store-missing-authorization-in-apps-controller"},{"cve":"CVE-2026-78065","cvss":4.3,"epss":0.0035,"slug":"cve-2026-78065-j2store-guest-checkout-address-disclosure-via-idor","title":"J2Store guest checkout address disclosure via IDOR","severity":"info","exploited":false,"published_at":"2026-09-03T13:06:09.2+00:00","url":"https://junglewise.ai/threats/cve-2026-78065-j2store-guest-checkout-address-disclosure-via-idor"},{"cve":"CVE-2026-78064","cvss":7.5,"epss":0.0041,"slug":"cve-2026-78064-j2store-anonymous-cart-tampering-via-fof-save-task","title":"J2Store anonymous cart tampering via FOF save task","severity":"info","exploited":false,"published_at":"2026-09-03T13:06:09.06+00:00","url":"https://junglewise.ai/threats/cve-2026-78064-j2store-anonymous-cart-tampering-via-fof-save-task"},{"cve":"CVE-2026-78000","epss":0.0055,"slug":"cve-2026-78000-j2store-reflected-xss-via-filter-tag-pricefrom-priceto-parameters","title":"J2Store reflected XSS via filter_tag, pricefrom, priceto parameters","severity":"info","exploited":false,"published_at":"2026-09-03T13:06:08.917+00:00","url":"https://junglewise.ai/threats/cve-2026-78000-j2store-reflected-xss-via-filter-tag-pricefrom-priceto-parameters"},{"cve":"CVE-2026-77999","cvss":9.1,"epss":0.0043,"slug":"cve-2026-77999-j2store-paypal-ipn-signature-bypass-and-order-confirmation-fraud","title":"J2Store PayPal IPN signature bypass and order confirmation fraud","severity":"info","exploited":false,"published_at":"2026-09-03T13:06:08.76+00:00","url":"https://junglewise.ai/threats/cve-2026-77999-j2store-paypal-ipn-signature-bypass-and-order-confirmation-fraud"},{"cve":"CVE-2026-67362","epss":0.0054,"slug":"cve-2026-67362-j2store-open-redirect-in-cart-controller","title":"J2Store open redirect in cart controller","severity":"info","exploited":false,"published_at":"2026-08-21T20:16:39.96+00:00","url":"https://junglewise.ai/threats/cve-2026-67362-j2store-open-redirect-in-cart-controller"},{"cve":"CVE-2026-67361","epss":0.0021,"slug":"cve-2026-67361-j2store-unauthenticated-file-upload-with-missing-directory","title":"J2Store unauthenticated file upload with missing directory protection","severity":"info","exploited":false,"published_at":"2026-08-21T20:16:39.827+00:00","url":"https://junglewise.ai/threats/cve-2026-67361-j2store-unauthenticated-file-upload-with-missing-directory"},{"cve":"CVE-2026-67360","cvss":5.7,"epss":0.0041,"slug":"cve-2026-67360-j2store-cross-customer-order-replication-in-cart-checkout","title":"J2Store cross-customer order replication in cart checkout","severity":"info","exploited":false,"published_at":"2026-08-21T20:16:39.7+00:00","url":"https://junglewise.ai/threats/cve-2026-67360-j2store-cross-customer-order-replication-in-cart-checkout"},{"cve":"CVE-2026-67359","epss":0.0041,"slug":"cve-2026-67359-j2store-order-information-disclosure","title":"J2Store order information disclosure","severity":"info","exploited":false,"published_at":"2026-08-21T20:16:39.583+00:00","url":"https://junglewise.ai/threats/cve-2026-67359-j2store-order-information-disclosure"},{"cve":"CVE-2026-67358","cvss":0,"epss":0.0019,"slug":"cve-2026-67358-j2store-download-quota-manipulation-and-csrf-bypass","title":"J2Store download quota manipulation and CSRF bypass","severity":"info","exploited":false,"published_at":"2026-08-21T20:16:39.45+00:00","url":"https://junglewise.ai/threats/cve-2026-67358-j2store-download-quota-manipulation-and-csrf-bypass"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":6},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"J2commerce.com J2Store","slug":"j2store","vendor":{"name":"J2commerce.com","slug":"j2commerce-com","url":"https://junglewise.ai/threats/vendors/j2commerce-com"},"aliases":[],"category":"extension","url":"https://junglewise.ai/threats/technologies/j2store"},"most_severe":[{"cve":"CVE-2026-77999","cvss":9.1,"epss":0.0043,"slug":"cve-2026-77999-j2store-paypal-ipn-signature-bypass-and-order-confirmation-fraud","title":"J2Store PayPal IPN signature bypass and order confirmation fraud","severity":"info","exploited":false,"published_at":"2026-09-03T13:06:08.76+00:00","url":"https://junglewise.ai/threats/cve-2026-77999-j2store-paypal-ipn-signature-bypass-and-order-confirmation-fraud"},{"cve":"CVE-2026-82189","cvss":7.5,"epss":0.0043,"slug":"cve-2026-82189-j2store-order-status-manipulation-via-unauthenticated-request","title":"J2Store order status manipulation via unauthenticated request","severity":"info","exploited":false,"published_at":"2026-09-15T19:17:41.98+00:00","url":"https://junglewise.ai/threats/cve-2026-82189-j2store-order-status-manipulation-via-unauthenticated-request"},{"cve":"CVE-2026-78064","cvss":7.5,"epss":0.0041,"slug":"cve-2026-78064-j2store-anonymous-cart-tampering-via-fof-save-task","title":"J2Store anonymous cart tampering via FOF save task","severity":"info","exploited":false,"published_at":"2026-09-03T13:06:09.06+00:00","url":"https://junglewise.ai/threats/cve-2026-78064-j2store-anonymous-cart-tampering-via-fof-save-task"},{"cve":"CVE-2026-81567","cvss":7.5,"epss":0.0039,"slug":"cve-2026-81567-j2store-sql-injection-in-storefront-product-list","title":"J2Store SQL injection in storefront product list","severity":"info","exploited":false,"published_at":"2026-09-15T19:17:40.947+00:00","url":"https://junglewise.ai/threats/cve-2026-81567-j2store-sql-injection-in-storefront-product-list"},{"cve":"CVE-2026-81568","cvss":6.5,"epss":0.005,"slug":"cve-2026-81568-j2store-arbitrary-file-read-via-path-traversal-in-download","title":"J2Store arbitrary file read via path traversal in download handler","severity":"info","exploited":false,"published_at":"2026-09-15T19:17:41.073+00:00","url":"https://junglewise.ai/threats/cve-2026-81568-j2store-arbitrary-file-read-via-path-traversal-in-download"},{"cve":"CVE-2026-67360","cvss":5.7,"epss":0.0041,"slug":"cve-2026-67360-j2store-cross-customer-order-replication-in-cart-checkout","title":"J2Store cross-customer order replication in cart checkout","severity":"info","exploited":false,"published_at":"2026-08-21T20:16:39.7+00:00","url":"https://junglewise.ai/threats/cve-2026-67360-j2store-cross-customer-order-replication-in-cart-checkout"},{"cve":"CVE-2026-78065","cvss":4.3,"epss":0.0035,"slug":"cve-2026-78065-j2store-guest-checkout-address-disclosure-via-idor","title":"J2Store guest checkout address disclosure via IDOR","severity":"info","exploited":false,"published_at":"2026-09-03T13:06:09.2+00:00","url":"https://junglewise.ai/threats/cve-2026-78065-j2store-guest-checkout-address-disclosure-via-idor"},{"cve":"CVE-2026-82191","cvss":2.7,"epss":0.0045,"slug":"cve-2026-82191-j2store-paypal-parameter-injection-in-redirect","title":"J2Store PayPal parameter injection in redirect","severity":"info","exploited":false,"published_at":"2026-09-15T19:17:42.237+00:00","url":"https://junglewise.ai/threats/cve-2026-82191-j2store-paypal-parameter-injection-in-redirect"},{"cve":"CVE-2026-82190","cvss":0,"epss":0.0033,"slug":"cve-2026-82190-j2store-predictable-order-access-token","title":"J2Store predictable order access token","severity":"info","exploited":false,"published_at":"2026-09-15T19:17:42.11+00:00","url":"https://junglewise.ai/threats/cve-2026-82190-j2store-predictable-order-access-token"},{"cve":"CVE-2026-67358","cvss":0,"epss":0.0019,"slug":"cve-2026-67358-j2store-download-quota-manipulation-and-csrf-bypass","title":"J2Store download quota manipulation and CSRF bypass","severity":"info","exploited":false,"published_at":"2026-08-21T20:16:39.45+00:00","url":"https://junglewise.ai/threats/cve-2026-67358-j2store-download-quota-manipulation-and-csrf-bypass"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}