Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2026-63265

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Joomla

Description

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

regularlabs.com Advanced Module Manager extension for Joomla

Default version status: unaffected

  • 1.0.0-11.0.1affected

regularlabs.com Articles Anywhere extension for Joomla

Default version status: unaffected

  • 1.0.0-18.0.2affected

regularlabs.com Articles Field extension for Joomla

Default version status: unaffected

  • 1.0.0-4.7.1affected

regularlabs.com Better Frontend Link extension for Joomla

Default version status: unaffected

  • 1.0.0-2.2.5affected

regularlabs.com Cache Cleaner extension for Joomla

Default version status: unaffected

  • 1.0.0-9.7.6affected

regularlabs.com CDN for Joomla extension for Joomla

Default version status: unaffected

  • 1.0.0-7.3.7affected

regularlabs.com Conditional Content extension for Joomla

Default version status: unaffected

  • 1.0.0-6.0.0affected

regularlabs.com Content Templater extension for Joomla

Default version status: unaffected

  • 1.0.0-13.0.0affected

regularlabs.com DB Replacer extension for Joomla

Default version status: unaffected

  • 1.0.0-8.2.7affected

regularlabs.com Email Protector extension for Joomla

Default version status: unaffected

  • 1.0.0-6.3.7affected

regularlabs.com Regular Labs Extension Manager extension for Joomla

Default version status: unaffected

  • 1.0.0-9.2.5affected

regularlabs.com GeoIP extension for Joomla

Default version status: unaffected

  • 1.0.0-6.3.8affected

regularlabs.com IP Login extension for Joomla

Default version status: unaffected

  • 1.0.0-6.2.5affected

regularlabs.com Keyboard Shortcuts extension for Joomla

Default version status: unaffected

  • 1.0.0-3.2.5affected

regularlabs.com Modals extension for Joomla

Default version status: unaffected

  • 1.0.0-15.0.0affected

regularlabs.com Modules Anywhere extension for Joomla

Default version status: unaffected

  • 1.0.0-8.4.1affected

regularlabs.com Quick Index extension for Joomla

Default version status: unaffected

  • 1.0.0-4.3.6affected

regularlabs.com ReReplacer extension for Joomla

Default version status: unaffected

  • 1.0.0-15.0.3affected

regularlabs.com Snippets extension for Joomla

Default version status: unaffected

  • 1.0.0-9.3.10affected

regularlabs.com Sourcerer extension for Joomla

Default version status: unaffected

  • 1.0.0-12.2.8affected

regularlabs.com Tooltips extension for Joomla

Default version status: unaffected

  • 1.0.0-9.4.7affected

regularlabs.com Users Anywhere extension for Joomla

Default version status: unaffected

  • 1.0.0-1.2.7affected

regularlabs.com What? Nothing! extension for Joomla

Default version status: unaffected

  • 1.0.0-17.2.5affected

References