Skip to content
OpenAdvisories

Vendor

regularlabs.com

44 known vulnerabilities.

Products

Articles Anywhere extension for Joomla 6 GeoIP extension for Joomla 5 Conditional Content extension for Joomla 5 Sourcerer extension for Joomla 4 Advanced Module Manager extension for Joomla 4 Modules Anywhere extension for Joomla 4 Content Templater (Pro) extension for Joomla 4 IP Login extension for Joomla 3 ReReplacer extension for Joomla 3 Cache Cleaner Pro extension for Joomla 3 Users Anywhere extension for Joomla 3 ReReplacer extension Pro for Joomla 3 Articles Anywhere (Pro) extension for Joomla 3 Users Anywhere (Pro) extension for Joomla 3 Tabs & Accordions (Free, Pro) extension for Joomla 2 Cache Cleaner extension for Joomla 2 Content Templater extension for Joomla 2 Regular Labs Extension Manager extension for Joomla 2 Modals extension for Joomla 2 Snippets extension for Joomla 2 Tooltips extension for Joomla 2 ReReplacer PRo extension for Joomla 2 Keyboard Shortcuts extension for Joomla 2 Modules Anywhere Pro extension for Joomla 2 Modals Pro extension for Joomla 2 Snippets (Pro) extension for Joomla 2 DB Replacer extension for Joomla 2 Articles Field extension for Joomla 1 Better Frontend Link extension for Joomla 1 CDN for Joomla extension for Joomla 1 Email Protector extension for Joomla 1 Quick Index extension for Joomla 1 What? Nothing! extension for Joomla 1 CDN for Joomla Pro extension for Joomla 1 Tabs & Accordions Pro extension for Joomla 1 Snippets (Free) extension for Joomla 1 Quick Index (Free, Pro) extension for Joomla 1 Sourcerer for Joomla 1 Sourcerer Free extension for Joomla 1 Sourcerer Pro extension for Joomla 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-85192

    Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0

    Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0 - Conditional Content Pro accepts inline PHP Condition Rules in article syntax. In affected versions, the PHP is passed to…

    regularlabs.com Conditional Content Pro extension for Joomla Web / CMS
  • Critical 10.0
    CVE-2026-74253

    Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0

    Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0 - Regular Labs Sourcerer before 16.0.0 processes {source} blocks found in Joomla’s final rendered HTML without reliably determining where th…

    regularlabs.com Sourcerer extension for Joomla Web / CMS
  • Critical 9.8
    CVE-2026-64873

    Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension

    Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services.

    regularlabs.com Cache Cleaner Pro extension for Joomla Web / CMS
  • Critical 9.8
    CVE-2026-64874

    Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension

    Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs.

    regularlabs.com Cache Cleaner Pro extension for Joomla Web / CMS
  • Critical 9.8
    CVE-2026-65431

    Joomla Extension - regularlabs.com - Zipslip in GeoIP extension

    Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions.

    regularlabs.com GeoIP extension for Joomla Web / CMS
  • Critical 9.1
    CVE-2026-64793

    Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions

    Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions - Content tags could use ignore flags or property overrides to render restricted or unpublished articles or modules. A content auth…

    regularlabs.com Articles Anywhere extension for Joomla Modules Anywhere extension for Joomla Web / CMS
  • Critical 9.8
    CVE-2026-64796

    Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension

    Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension - Free did not require both the article creator and last modifier to be Super Users before executing article PHP. Pro did not consistently enforce configured CSS, JavaS…

    regularlabs.com Sourcerer extension for Joomla Web / CMS
  • Critical 9.1
    CVE-2026-64798

    Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension

    Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy.

    regularlabs.com IP Login extension for Joomla Web / CMS
  • Critical 9.8
    CVE-2025-22204

    Extension - regularlabs.com - Remote code execution vulnerability in the Sourcerer extensions < 12.0.0 for Joomla

    Improper control of generation of code in the sourcerer extension for Joomla in versions before 11.0.0 lead to a remote code execution vulnerability.

    regularlabs.com Sourcerer for Joomla Web / CMS