regularlabs.com Vulnerabilities and Affected Products
Vulnerabilities associated with Articles Anywhere extension for Joomla.
Products
Clear product- Articles Anywhere extension for Joomla5 vulnerabilities
- Conditional Content extension for Joomla5 vulnerabilities
- GeoIP extension for Joomla5 vulnerabilities
- Advanced Module Manager extension for Joomla4 vulnerabilities
- Modules Anywhere extension for Joomla4 vulnerabilities
- Cache Cleaner Pro extension for Joomla3 vulnerabilities
- Content Templater Pro extension for Joomla3 vulnerabilities
- IP Login extension for Joomla3 vulnerabilities
- ReReplacer extension for Joomla3 vulnerabilities
- ReReplacer extension Pro for Joomla3 vulnerabilities
- Sourcerer extension for Joomla3 vulnerabilities
- Users Anywhere extension for Joomla3 vulnerabilities
- Articles Anywhere Pro extension for Joomla2 vulnerabilities
- Cache Cleaner extension for Joomla2 vulnerabilities
- Content Templater extension for Joomla2 vulnerabilities
- DB Replacer extension for Joomla2 vulnerabilities
- Keyboard Shortcuts extension for Joomla2 vulnerabilities
- Modals extension for Joomla2 vulnerabilities
- Regular Labs Extension Manager extension for Joomla2 vulnerabilities
- Snippets extension for Joomla2 vulnerabilities
- Tooltips extension for Joomla2 vulnerabilities
- Users Anywhere Pro extension for Joomla2 vulnerabilities
- Articles Field extension for Joomla1 vulnerability
- Better Frontend Link extension for Joomla1 vulnerability
- CDN for Joomla extension for Joomla1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-65755HIGH | Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extensionJoomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension - Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or expiry boundaries, potentially exposing content after it should become unavailable. CWE-524Jul 23, 2026 | CVSS7.5v3.1 | EPSS0.245% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-64793CRITICAL | Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensionsJoomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions - Content tags could use ignore flags or property overrides to render restricted or unpublished articles or modules. A content author could thereby expose content to visitors who lacked the required access. CWE-284Jul 22, 2026 | CVSS9.1v3.1 | EPSS0.246% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-64794MEDIUM | Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensionsJoomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions - User tags, filters and conditions allowed access to insufficiently restricted user fields. Crafted content could expose authentication-related data, raw user parameters or restricted contact details. CWE-284Jul 22, 2026 | CVSS6.5v3.1 | EPSS0.244% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-63265HIGH | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpointsJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization. | CVSS8.0v3.1 | EPSS0.115% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-64792HIGH | Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensionsJoomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors. CWE-524Jul 22, 2026 | CVSS7.5v3.1 | EPSS0.249% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |