CVE-2026-65712

The CVE-2026-65712 entry concerns the Joomla Pro extension from Regular Labs. Vulnerability detail: CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata. This indicates a path handling flaw in the CDN integration that may allow ...

CVE-2026-65756 Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension

Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript...

CVE-2026-65756 Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension

Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript...

CVE-2026-65756

CVE-2026-65756 affects the Joomla extension Keyboard Shortcuts from regularlabs.com. The issue is an XSS vector where shortcut configuration accepts arbitrary inline JavaScript, allowing potential script execution in the context of the affected extension. Per the published metrics, the attack vec...

CVE-2026-64874

The CVE-2026-64874 entry concerns the Joomla extension Cache Cleaner Pro by regularlabs.com, where CDN credentials were exposed in administrator request URLs. The connected sources consistently describe credential leakage in requests to CDN-related functionality, indicating sensitive data exposur...

CVE-2026-64799

CVE-2026-64799 concerns a Joomla extension by Regular Labs (Articles Anywhere and Users Anywhere). The flaw allows an attacker-controlled image URL to trigger SSRF by requesting private/reserved network services, following unsafe redirects, and saving non-image responses without validating image ...

CVE-2026-65430

CVE-2026-65430 concerns a Joomla extension from regularlabs.com (GeoIP component) where MaxMind credentials were leaked in request URLs. The connected documents provide the vulnerability description but do not specify affected versions, exact vulnerable file(s)/function, or root cause details bey...

CVE-2026-65431

CVE-2026-65431 affects the Joomla extension GeoIP from Regular Labs. The issue arises from zip archives in Geo IP database updates being extracted without path validation, enabling unsafe file extractions. The description indicates a zip-slip style vulnerability that could allow writing files out...

Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection

SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request. id: CVE-2018-6605 info: name: Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection author: DhiyaneshDk severity...

Joomla! Component CCNewsLetter - Local File Inclusion

A directory traversal vulnerability in the ccNewsletter comccnewsletter component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter in a ccnewsletter action to index.php. id: CVE-2010-0467 info: name: Joomla! Component CCNewsLetter -...

Joomla! Jtag Members Directory 5.3.7 - Local File Inclusion

Joomla! Jtag Members Directory 5.3.7 is vulnerable to local file inclusion via the downloadfile parameter. id: CVE-2018-6008 info: name: Joomla! Jtag Members Directory 5.3.7 - Local File Inclusion author: daffainfo severity: high description: Joomla! Jtag Members Directory 5.3.7 is vulnerable to...

Joomla! Component Percha Gallery 1.6 Beta - Directory Traversal

A directory traversal vulnerability in the Percha Gallery comperchagallery component 1.6 Beta for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-2035 info: name: Joomla!...

Joomla! Component GMapFP 3.5 - Arbitrary File Upload

Joomla! Component GMapFP 3.5 is vulnerable to arbitrary file upload vulnerabilities. An attacker can access the upload function of the application without authentication and can upload files because of unrestricted file upload which can be bypassed by changing Content-Type & name file too double...

Joomla! Image Browser 0.1.5 rc2 - Local File Inclusion

Joomla! Image Browser 0.1.5 rc2 is susceptible to local file inclusion via comimagebrowser which could allow remote attackers to include and execute arbitrary local files via a .. dot dot in the folder parameter to index.php. id: CVE-2008-4668 info: name: Joomla! Image Browser 0.1.5 rc2 - Local...

CVE-2026-64793 Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions

Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions - Content tags could use ignore flags or property overrides to render restricted or unpublished articles or modules. A content author could thereby expose content to...

CVE-2026-64793

The CVE-2026-64793 issue stems from Regular Labs Joomla extensions (Articles Anywhere and Modules Anywhere). Content tags could use ignore flags or property overrides to render restricted or unpublished articles/modules, allowing a content author to expose content to visitors who do not have the ...

CVE-2026-64794 Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions

Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions - User tags, filters and conditions allowed access to insufficiently restricted user fields. Crafted content could expose authentication-related data, raw user parameters or...

CVE-2026-64794

CVE-2026-64794 affects Joomla extensions from Regular Labs: Users Anywhere and Articles Anywhere. The issue arises because user tags, filters, and conditions allowed access to insufficiently restricted user fields, enabling crafted content to expose authentication-related data, raw user parameter...

CVE-2026-64797

CVE-2026-64797 affects the Joomla extension from regularlabs.com (IP Login). The vulnerability arises because the extension trusts forwarded client-IP headers without requiring a configured trusted proxy, allowing an attacker to spoof the IP used for automatic login and potentially impersonate ma...

CVE-2026-64797 Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension

Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension - IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. Attackers could spoof the IP used for automatic login and potentially impersonate mapped accounts...