Skip to content
OpenAdvisories
High · 7.5 CVE-2026-64797 EUVD-2026-47815GHSA-4hf8-pxr9-gc7w

Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension

Published Jul 22, 2026 · Updated Jul 29, 2026 · Assigned by Joomla

Description

Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension - IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. Attackers could spoof the IP used for automatic login and potentially impersonate mapped accounts.

Affected products

VendorProductAffectedFixed
regularlabs.com IP Login extension for Joomla 1.0.0-6.2.5 —

References