regularlabs.com Vulnerabilities and Affected Products
Vulnerabilities associated with Content Templater Pro extension for Joomla.
Products
Clear product- Articles Anywhere extension for Joomla5 vulnerabilities
- Conditional Content extension for Joomla5 vulnerabilities
- GeoIP extension for Joomla5 vulnerabilities
- Advanced Module Manager extension for Joomla4 vulnerabilities
- Modules Anywhere extension for Joomla4 vulnerabilities
- Cache Cleaner Pro extension for Joomla3 vulnerabilities
- Content Templater Pro extension for Joomla3 vulnerabilities
- IP Login extension for Joomla3 vulnerabilities
- ReReplacer extension for Joomla3 vulnerabilities
- ReReplacer extension Pro for Joomla3 vulnerabilities
- Sourcerer extension for Joomla3 vulnerabilities
- Users Anywhere extension for Joomla3 vulnerabilities
- Articles Anywhere Pro extension for Joomla2 vulnerabilities
- Cache Cleaner extension for Joomla2 vulnerabilities
- Content Templater extension for Joomla2 vulnerabilities
- DB Replacer extension for Joomla2 vulnerabilities
- Keyboard Shortcuts extension for Joomla2 vulnerabilities
- Modals extension for Joomla2 vulnerabilities
- Regular Labs Extension Manager extension for Joomla2 vulnerabilities
- Snippets extension for Joomla2 vulnerabilities
- Tooltips extension for Joomla2 vulnerabilities
- Users Anywhere Pro extension for Joomla2 vulnerabilities
- Articles Field extension for Joomla1 vulnerability
- Better Frontend Link extension for Joomla1 vulnerability
- CDN for Joomla extension for Joomla1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-63280HIGH | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions managerJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions. | CVSS8.8v3.1 | EPSS0.127% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-63683HIGH | Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions managerJoomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules. CWE-290Jul 22, 2026 | CVSS7.5v3.1 | EPSS0.226% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-63281MEDIUM | Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions managerJoomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries. CWE-79Jul 22, 2026 | CVSS4.8v3.1 | EPSS0.142% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |