Export limit exceeded: 369970 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (29 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-64872 1 Regularlabs.com 1 Cache Cleaner Pro Extension For Joomla 2026-07-23 N/A
Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge and log paths could escape the site webroot directory.
CVE-2026-64876 1 Regularlabs.com 1 Geoip Extension For Joomla 2026-07-23 N/A
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension - Database-update requests lacked consistent token and Super User checks, this could cause unauthorized updates.
CVE-2026-64875 1 Regularlabs.com 1 Geoip Extension For Joomla 2026-07-23 N/A
Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension - GeoIP lookups trusted spoofable forwarded client-IP headers, this could cause GeoIP-rule bypass.
CVE-2026-65754 1 Regularlabs.com 1 Rereplacer Pro Extension For Joomla 2026-07-23 N/A
Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension - ReReplacer XML include paths could read files outside the site directory.
CVE-2026-65755 1 Regularlabs.com 2 Articles Anywhere Extension For Joomla, Users Anywhere Extension For Joomla 2026-07-23 N/A
Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension - Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or expiry boundaries, potentially exposing content after it should become unavailable.
CVE-2026-65757 1 Regularlabs.com 1 Modules Anywhere Extension For Joomla 2026-07-23 N/A
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens.
CVE-2026-64871 1 Regularlabs.com 1 Cache Cleaner Extension For Joomla 2026-07-23 N/A
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension - Administrator URL purges did not consistently require a valid token and cache-management permission.
CVE-2026-64873 1 Regularlabs.com 1 Cache Cleaner Pro Extension For Joomla 2026-07-23 N/A
Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services.
CVE-2026-65713 1 Regularlabs.com 1 Modals Pro Extension For Joomla 2026-07-23 N/A
Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories.