CVE-2026-102801

The Users Anywhere extension for Joomla (versions prior to 3.0.1 ) is vulnerable to the exposure of sensitive information (usernames and email addresses). The root cause is that attributes supplied within {user} or [email] / [username] tags can override global plugin settings. For instance, using...

EUVD-2026-115175

Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla 3.0.1 - An administrator can disable output of user email addresses or usernames in Users Anywhere. In affected code, attributes supplied inside a user or email /...

CVE-2026-102801: regularlabs.com: Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere…

Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla 3.0.1 - An administrator can disable output of user email addresses or usernames in Users Anywhere. In affected code, attributes supplied inside a user or email /...