Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-63265

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Advanced Module Manager Extension For Joomla Articles Anywhere Extension For Joomla Articles Field Extension For Joomla and 20 more
CVE-2026-64792

Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions

Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Articles Anywhere Extension For Joomla Conditional Content Extension For Joomla Modules Anywhere Extension For Joomla and 4 more
CVE-2026-64793

Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions

Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions - Content tags could use ignore flags or property overrides to render restricted or unpublished articles or modules. A content author could thereby expose content to visitors who lacked the required access.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Articles Anywhere Extension For Joomla Modules Anywhere Extension For Joomla
CVE-2026-65757

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Regularlabs.com
Products
Modules Anywhere Extension For Joomla