CVE-2026-65761 Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions...

CVE-2026-65760

Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to retreive order and customer information of any order in the system...

CVE-2026-65760 Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1

Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to retreive order and customer information of any order in the system...

CVE-2026-65760

The CVE-2026-65760 entry concerns the Joomla Easy Store extension by joomshaper.com (versions 1.0.0–2.0.1). The vulnerability is described as improper access checks that allow logged-in users to retrieve order and customer information for any order, indicating a cross-customer confidentiality lea...

CVE-2026-65760 Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1

Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to retreive order and customer information of any order in the system...

CVE-2026-65758 Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2

Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions...

CVE-2026-65758

CVE-2026-65758 affects the Joomla Convert Forms extension (versions 2.5.0–5.2.2). The root cause is that the front-end Submissions view does not enforce access control, allowing an unauthenticated visitor to list a form’s submissions, exposing sensitive data. The available connected sources clear...

CVE-2026-65758 Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2

Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions...

CVE-2026-65713

Affected software: Joomla extension Modals Pro by regularlabs.com (Modals gallery feature). Issue: insecure path handling enables enumeration of unintended directories through Modals gallery paths. Impact: potential exposure of directory listings in the context of the Modals Pro extension as desc...

CVE-2026-64873

The CVE-2026-64873 entry concerns the Joomla extension from Regular Labs, specifically Cache Cleaner Pro, with an SSRF vulnerability. According to the connected records, custom query URLs could cause the extension to access internal or reserved network services, indicating an internal network exp...

CVE-2026-64871

The CVE concerns the Joomla extension Cache Cleaner by Regular Labs. The issue is that administrator URL purges did not consistently require a valid CSRF token and the cache-management permission, indicating a mismatch between token validation and privilege checks. The Connected documents identif...

CVE-2026-65757

The Joomla extension Modules Anywhere from regularlabs.com is affected by CVE-2026-65757. The root cause is inconsistent CSRF token checks and privilege checks within the extension, allowing an editor popup to expose restricted module data to authenticated users who do not have the required modul...

CVE-2026-65755

Summary: CVE-2026-65755 affects the Joomla Extension from regularlabs.com (Articles Anywhere and Users Anywhere). The issue is in the date-sensitive query cache keys which did not retain a bounded time component, allowing cached results to stay active across future publication or expiry boundarie...

CVE-2026-65754

CVE-2026-65754 concerns the Joomla extension ReReplacer Pro by Regular Labs. The connected sources describe an insecure path handling weakness in the ReReplacer XML include paths, which could allow reading files outside the site directory. The vulnerability is tied to the ReReplacer Pro extension...

CVE-2026-64875

CVE-2026-64875 concerns a Joomla Extension by RegularLabs: the GeoIP feature uses trusted, spoofable forwarded client-IP headers for GeoIP lookups, enabling a possible bypass of GeoIP rules. The connected records state the root cause as spoofable headers affecting GeoIP lookups and an implied imp...

CVE-2026-64876

Technical details about CVE-2026-64876 are not provided in the supplied documents. The available materials only state inconsistent CSRF token and privilege checks in the GeoIP extension; monitor for updates if more information surfaces.

CVE-2026-64872

CVE-2026-64872 affects the Joomla extension Cache Cleaner Pro by regularlabs.com. The issue is a path traversal vulnerability where the extension’s custom purge and log paths could escape the site webroot directory, potentially exposing or manipulating files outside the intended web-accessible ar...

CVE-2026-65712

The CVE-2026-65712 entry concerns the Joomla Pro extension from Regular Labs. Vulnerability detail: CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata. This indicates a path handling flaw in the CDN integration that may allow ...

CVE-2026-65756 Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension

Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript...

CVE-2026-65756

CVE-2026-65756 affects the Joomla extension Keyboard Shortcuts from regularlabs.com. The issue is an XSS vector where shortcut configuration accepts arbitrary inline JavaScript, allowing potential script execution in the context of the affected extension. Per the published metrics, the attack vec...