CVE-2026-13009

The CVE-2026-13009 entry concerns the AI Copilot – Content Generator WordPress plugin. Affected component: the plugin’s SQL handling in all versions up to 1.5.4. Root cause: insufficient escaping of the user-supplied parameter in the order[0][dir] input and inadequate preparation of the existing ...

CVE-2026-13119

The Registrations For The Events Calendar plugin for WordPress (

CVE-2026-15786

CVE-2026-15786 affects the WordPress plugin “WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan.” All versions up to 7.8.6.6 are vulnerable to Directory Traversal via the “imploded” parameter. With administrator-level access, an authenticated attacker could...

CVE-2026-15348

The CVE affects the WordPress plugin Premium Packages – Sell Digital Products Securely up to version 7.0.4 . The vulnerability arises in the download() function, which is hooked to the unauthenticated WordPress wp action and decodes the attacker-controlled wpdmppdl parameter with only base64_deco...

CVE-2026-15017

The MDJM Event Management plugin for WordPress is vulnerable to Privilege Escalation in all versions up to 1.7.8.4. The root cause is missing capability checks and nonce verification in MDJM_Permissions::set_permissions() and MDJM_Employee_Manager::init(), combined with the absence of server-side...

CVE-2026-65758

CVE-2026-65758 affects the Joomla Convert Forms extension (versions 2.5.0–5.2.2). The root cause is that the front-end Submissions view does not enforce access control, allowing an unauthenticated visitor to list a form’s submissions, exposing sensitive data. The available connected sources clear...

CVE-2026-65713

CVE-2026-65713 concerns the Joomla Extension from regularlabs.com, specifically the Modals Pro extension. The issue is insecure path handling in the Modals gallery paths, which could allow enumeration of unintended directories. The available data lists a CVSS v3.1 base score of 6.5 (Medium) with ...

CVE-2026-64873

CVE-2026-64873 affects the Joomla Extension Cache Cleaner Pro from Regular Labs. The issue is described as an SSRF vulnerability where custom query URLs could reach internal or reserved network services, implying a high-severity impact (CVSS: 3.1, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base score 9...

CVE-2026-64871

CVE-2026-64871 affects the Joomla extension Cache Cleaner from Regular Labs. The report describes inconsistent CSRF token checks and privilege checks for administrator URL purge actions, meaning those actions did not consistently require a valid token and the necessary cache-management permission...

CVE-2026-65757

CVE-2026-65757 affects the Joomla Extension from Regular Labs (Modules Anywhere). The vulnerability arises from inconsistent CSRF token checks and privilege checks in the editor popup, which could allow an authenticated user to access restricted module data without the required module permissions...

CVE-2026-65755

Summary: CVE-2026-65755 concerns the Joomla extension family from regularlabs.com (Articles Anywhere and Users Anywhere). The issue is a date-sensitive query-cache leakage caused by cache keys that do not retain a bounded time component, allowing cached results to remain active across future publ...

CVE-2026-65754

CVE-2026-65754 concerns Joomla Extension RegularLabs ReReplacer Pro, with insecure path handling: ReReplacer XML include paths could read files outside the site directory. The CVSS 3.1 vector indicates network attack, low complexity, no user interaction, with high confidentiality impact and no in...

CVE-2026-64875

The CVE-2026-64875 entry concerns a Joomla GeoIP extension by regularlabs.com. The issue is an IP spoofing vulnerability where GeoIP lookups trust spoofable forwarded client-IP headers, enabling potential GeoIP-rule bypass. Affected component: GeoIP extension within the Regular Labs Joomla extens...

CVE-2026-64876

CVE-2026-64876 affects the Joomla extension from regularlabs.com, specifically the GeoIP extension. The issue arises from inconsistent CSRF token checks and privilege checks, causing database-update requests to lack consistent token validation and Super User checks. This could permit unauthorized...

CVE-2026-64872

The CVE-2026-64872 entry concerns a Joomla extension from regularlabs.com, specifically the Cache Cleaner Pro extension. The vulnerability is a path traversal issue where custom purge and log paths could escape the site webroot directory. Documents consistently reference this path traversal flaw ...

CVE-2026-65712

CVE-2026-65712 concerns Joomla Extension - regularlabs.com, specifically the Joomla Pro CDN feature. The issue is insecure path handling in the CDN versioning system, which could check file paths outside the site directory, potentially exposing local file existence and modification metadata. The ...

CVE-2026-65756

CVE-2026-65756 affects the Joomla extension Keyboard Shortcuts from regularlabs.com. The issue is an XSS vector where shortcut configuration accepts arbitrary inline JavaScript, allowing potential script execution in the context of the affected extension. Per the published metrics, the attack vec...

CVE-2026-64874

CVE-2026-64874 affects the Joomla extension Cache Cleaner Pro from regularlabs.com. The underlying issue is exposure of CDN credentials in administrator request URLs, enabling credential leakage. The published metrics indicate a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, no user ...

CVE-2026-64799

CVE-2026-64799 affects Joomla extensions from Regular Labs (Articles Anywhere and Users Anywhere). The issue is SSRF via remote image downloads where content-controlled image URLs can touch private or reserved network services, follow unsafe redirects, and save responses without validating they a...

CVE-2026-65430

CVE-2026-65430 affects the Joomla Extension GeoIP by regularlabs.com. The vulnerability is caused by leakage of MaxMind credentials in request URLs, exposing credentials via the extension’s operations. Documents explicitly identify credential leakage in the GeoIP component; no details on affected...