CVE-2026-64792
Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions
Record summary
CVE-2026-64792 has a selected CVSS score of 7.5 (high).
Description
Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.
Exploitation context
CISA SSVC decision
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 27, 2026 · Source: CVE List
Affected products and versions
7| Product | Source | Version range | Status |
|---|---|---|---|
Articles Anywhere extension for JoomlaBrowse regularlabs.com / Articles Anywhere extension for JoomlaDefault status: unaffected | CVE List | 1.0.0-18.0.2 | affected |
Conditional Content extension for JoomlaBrowse regularlabs.com / Conditional Content extension for JoomlaDefault status: unaffected | CVE List | 1.0.0-6.0.0 | affected |
Modules Anywhere extension for JoomlaBrowse regularlabs.com / Modules Anywhere extension for JoomlaDefault status: unaffected | CVE List | 1.0.0-8.4.1 | affected |
ReReplacer extension for JoomlaBrowse regularlabs.com / ReReplacer extension for JoomlaDefault status: unaffected | CVE List | 1.0.0-15.0.3 | affected |
Snippets Pro extension for JoomlaBrowse regularlabs.com / Snippets Pro extension for JoomlaDefault status: unaffected | CVE List | 1.0.0-9.3.10 | affected |
Sourcerer extension for JoomlaBrowse regularlabs.com / Sourcerer extension for JoomlaDefault status: unaffected | CVE List | 1.0.0-12.2.8 | affected |
Tabs & Accordions Pro extension for JoomlaBrowse regularlabs.com / Tabs & Accordions Pro extension for JoomlaDefault status: unaffected | CVE List | 1.0.0-2.5.6 | affected |