CVE-2026-64875

The CVE-2026-64875 entry concerns a Joomla GeoIP extension by regularlabs.com. The issue is an IP spoofing vulnerability where GeoIP lookups trust spoofable forwarded client-IP headers, enabling potential GeoIP-rule bypass. Affected component: GeoIP extension within the Regular Labs Joomla extens...

CVE-2026-64876 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension - Database-update requests lacked consistent token and Super User checks, this could cause unauthorized updates...

CVE-2026-64876 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension - Database-update requests lacked consistent token and Super User checks, this could cause unauthorized updates...

CVE-2026-64876

CVE-2026-64876 affects the Joomla extension from regularlabs.com, specifically the GeoIP extension. The issue arises from inconsistent CSRF token checks and privilege checks, causing database-update requests to lack consistent token validation and Super User checks. This could permit unauthorized...

CVE-2026-64872

The CVE-2026-64872 entry concerns a Joomla extension from regularlabs.com, specifically the Cache Cleaner Pro extension. The vulnerability is a path traversal issue where custom purge and log paths could escape the site webroot directory. Documents consistently reference this path traversal flaw ...

CVE-2026-64872 Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge and log paths could escape the site webroot directory...

CVE-2026-65712 Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension

Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata...

CVE-2026-65712 Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension

Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata...

CVE-2026-65712

CVE-2026-65712 concerns Joomla Extension - regularlabs.com, specifically the Joomla Pro CDN feature. The issue is insecure path handling in the CDN versioning system, which could check file paths outside the site directory, potentially exposing local file existence and modification metadata. The ...

CVE-2026-65756 Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension

Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript...

CVE-2026-65756

CVE-2026-65756 affects the Joomla extension Keyboard Shortcuts from regularlabs.com. The issue is an XSS vector where shortcut configuration accepts arbitrary inline JavaScript, allowing potential script execution in the context of the affected extension. Per the published metrics, the attack vec...

CVE-2026-65756 Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension

Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript...

CVE-2026-64874

CVE-2026-64874 affects the Joomla extension Cache Cleaner Pro from regularlabs.com. The underlying issue is exposure of CDN credentials in administrator request URLs, enabling credential leakage. The published metrics indicate a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, no user ...

CVE-2026-64874 Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs...

CVE-2026-64799

CVE-2026-64799 affects Joomla extensions from Regular Labs (Articles Anywhere and Users Anywhere). The issue is SSRF via remote image downloads where content-controlled image URLs can touch private or reserved network services, follow unsafe redirects, and save responses without validating they a...

CVE-2026-64799 Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions

Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This cou...

CVE-2026-64799 Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions

Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This cou...

CVE-2026-65430 Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...

CVE-2026-65430

CVE-2026-65430 affects the Joomla Extension GeoIP by regularlabs.com. The vulnerability is caused by leakage of MaxMind credentials in request URLs, exposing credentials via the extension’s operations. Documents explicitly identify credential leakage in the GeoIP component; no details on affected...

CVE-2026-65430 Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...