Search
Search Results (9 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-65755 | 1 Regularlabs.com | 2 Articles Anywhere Extension For Joomla, Users Anywhere Extension For Joomla | 2026-07-29 | 7.5 High |
| Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension - Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or expiry boundaries, potentially exposing content after it should become unavailable. | ||||
| CVE-2026-65754 | 1 Regularlabs.com | 1 Rereplacer Pro Extension For Joomla | 2026-07-28 | 7.5 High |
| Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension - ReReplacer XML include paths could read files outside the site directory. | ||||
| CVE-2026-63280 | 1 Regularlabs.com | 4 Advanced Module Manager Extension For Joomla, Conditional Content Extension For Joomla, Content Templater Pro Extension For Joomla and 1 more | 2026-07-28 | 8.8 High |
| Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions. | ||||
| CVE-2026-63683 | 1 Regularlabs.com | 4 Advanced Module Manager Extension For Joomla, Conditional Content Extension For Joomla, Content Templater Pro Extension For Joomla and 1 more | 2026-07-28 | 7.5 High |
| Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules. | ||||
| CVE-2026-64799 | 1 Regularlabs.com | 2 Articles Anywhere Pro Extension For Joomla, Users Anywhere Pro Extension For Joomla | 2026-07-27 | 7.5 High |
| Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This could result in SSRF, internal-data access or writing attacker-controlled files into a web-accessible folder. | ||||
| CVE-2026-65430 | 1 Regularlabs.com | 1 Geoip Extension For Joomla | 2026-07-27 | 7.5 High |
| Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability. | ||||
| CVE-2026-64875 | 1 Regularlabs.com | 1 Geoip Extension For Joomla | 2026-07-27 | 6.5 Medium |
| Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension - GeoIP lookups trusted spoofable forwarded client-IP headers, this could cause GeoIP-rule bypass. | ||||
| CVE-2026-64871 | 1 Regularlabs.com | 1 Cache Cleaner Extension For Joomla | 2026-07-24 | 5.4 Medium |
| Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension - Administrator URL purges did not consistently require a valid token and cache-management permission. | ||||
| CVE-2026-65712 | 1 Regularlabs.com | 1 Cdn For Joomla Pro Extension For Joomla | 2026-07-24 | 6.2 Medium |
| Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata. | ||||
Page 1 of 1.