J2Commerce 6 Migrator
Move an older J2Store or J2Commerce store to J2Commerce 6, with products, orders, customers, coupons and images landing in place.
Maintenance Mode
J2Store 4 (J2Commerce 4)
J2Store 4 is in maintenance mode and still receives regular and security updates, so your store stays protected while you plan your move.
Support Status
Where each version stands today.
Check the version your store runs today, then pick the path that keeps it current.
-
J2Store 4
Regular and security updates continue, so a J2Store 4 store stays protected while you plan the move to J2Commerce 6.
Maintenance Mode
-
J2Commerce 6
New features and new extensions arrive here first, on Joomla 6.
Active Development
Migrate to J2Commerce 6
Move your store to J2Commerce 6 with its history intact.
The J2Commerce 6 Migrator carries your catalog, orders, customers and images across.
Changelog
Latest J2Store 4 releases.
Open a release to see what was added, changed and fixed.
Changed
- Stop repeated include-path registration and product category lookups
- Smart Search plugin: stable batch order and CLI indexing
- Updated links
Fixed
- Restore the product form in the front-end article editor
- Product form: validation alert is pushed as an empty string, and the message must be JS-encoded at the boundary
- Fixed cannot add products when editing orders in the backend
- Apps controller: app_newline product tabs (loadJ2StoreLayout) return 403 when not logged in
Changed
- Stop repeated include-path registration and product category lookups
- Smart Search plugin: stable batch order and CLI indexing
- Updated links
Fixed
- Restore the product form in the front-end article editor
- Product form: validation alert is pushed as an empty string, and the message must be JS-encoded at the boundary
- Fixed cannot add products when editing orders in the backend
Added
- Add error handling and logging for defaultPosition and withinArticle methods in j2store content plugin
Changed
- Improved CSRF token handling for new module files and update warnings in help.php and the installer script
Fixed
- Fix user delegated tasks fail unauthorized
- Cannot remove order items in the cart
- Force reload to avoid invalid token on registration
- Fix token handling in cart item removal link for mod_j2store_cart
- Fix typos in installer script
Changed
- Improved CSRF token handling for new module files and update warnings in help.php and the installer script
Fixed
- Fix user delegated tasks fail unauthorized
- Cannot remove order items in the cart
- Force reload to avoid invalid token on registration
- Fix token handling in cart item removal link for mod_j2store_cart
- Fix typos in installer script
Fixed
- CVE-2026-78081 Missing CSRF protection on cart, checkout and myprofile controllers
- CVE-2026-81567 Blind SQL injection in the storefront product list
- CVE-2026-81568 Arbitrary file read via `task=download`
- CVE-2026-82189 Any order can be marked Failed by anyone
- CVE-2026-82190 Predictable/forgeable order access token
- CVE-2026-82191 Unescaped request data reflected into PayPal notify redirect
Fixed
- CVE-2026-78081 Missing CSRF protection on cart, checkout and myprofile controllers
- CVE-2026-81567 Blind SQL injection in the storefront product list
- CVE-2026-81568 Arbitrary file read via `task=download`
- CVE-2026-82189 Any order can be marked Failed by anyone
- CVE-2026-82190 Predictable/forgeable order access token
- CVE-2026-82191 Unescaped request data reflected into PayPal notify redirect
Launch with more today. Add what you grow into tomorrow.
Download J2Commerce 6 and start selling today.
