Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 34

Export CSV
CVE-2026-65430

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Geoip Extension For Joomla
CVE-2026-64793

Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions

Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions - Content tags could use ignore flags or property overrides to render restricted or unpublished articles or modules. A content author could thereby expose content to visitors who lacked the required access.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Articles Anywhere Extension For Joomla Modules Anywhere Extension For Joomla
CVE-2026-64794

Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions

Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions - User tags, filters and conditions allowed access to insufficiently restricted user fields. Crafted content could expose authentication-related data, raw user parameters or restricted contact details.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Articles Anywhere Extension For Joomla Users Anywhere Extension For Joomla
CVE-2026-64875

Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension

Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension - GeoIP lookups trusted spoofable forwarded client-IP headers, this could cause GeoIP-rule bypass.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Geoip Extension For Joomla
CVE-2026-64874

Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Cache Cleaner Pro Extension For Joomla
CVE-2026-64795

Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions

Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Articles Anywhere Pro Extension For Joomla Modals Extension For Joomla Modules Anywhere Pro Extension For Joomla and 2 more
CVE-2026-63281

Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager

Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Advanced Module Manager Extension For Joomla Conditional Content Extension For Joomla Content Templater Pro Extension For Joomla and 1 more
CVE-2026-65757

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Modules Anywhere Extension For Joomla
CVE-2026-65713

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Modals Pro Extension For Joomla
CVE-2026-64873

Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Cache Cleaner Pro Extension For Joomla
CVE-2026-64871

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension - Administrator URL purges did not consistently require a valid token and cache-management permission.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Cache Cleaner Extension For Joomla
CVE-2026-64872

Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge and log paths could escape the site webroot directory.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Cache Cleaner Pro Extension For Joomla
CVE-2026-65712

Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension

Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Cdn For Joomla Pro Extension For Joomla
CVE-2026-65756

Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension

Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Keyboard Shortcuts Extension For Joomla