# cve.now: Regularlabs.com

The newest entries naming Regularlabs.com as an affected vendor (up to 200), of 44 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-102802](https://cve.now/CVE-2026-102802.md): Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension \< 17.0.1 when used with Articles Anywhere extension… (CVSS 8.9)
- [CVE-2026-102801](https://cve.now/CVE-2026-102801.md): Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla \< 3.0.1 (CVSS 5.1)
- [CVE-2026-100750](https://cve.now/CVE-2026-100750.md): Joomla Extension - regularlabs.com - Arbitrary file read / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla (CVSS 8.5)
- [CVE-2026-100751](https://cve.now/CVE-2026-100751.md): Joomla Extension - regularlabs.com - Privileged stored XSS via data-rlta-url attributes in Tabs & Accordions (Pro) 2.3.0 - 3.1.0 (CVSS 7.5)
- [CVE-2026-85196](https://cve.now/CVE-2026-85196.md): Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla \< 20.0.0, Users Anywhere extension for Joomla \< 2.1.0 (CVSS 5.3)
- [CVE-2026-88852](https://cve.now/CVE-2026-88852.md): Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla \< 7.0.0, Snippets Pro extension for Joomla \< 11.0.0 (CVSS 7.5)
- [CVE-2026-85190](https://cve.now/CVE-2026-85190.md): Joomla Extension - regularlabs.com - Privileged stored XSS via class option in Quick Index extension for Joomla \< 5.0.5 (CVSS 7.5)
- [CVE-2026-85192](https://cve.now/CVE-2026-85192.md): Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla \< 8.0.0 (CVSS 9.4)
- [CVE-2026-85189](https://cve.now/CVE-2026-85189.md): Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla \< 17.0.0 (CVSS 7.5)
- [CVE-2026-85195](https://cve.now/CVE-2026-85195.md): Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla \< 20.0.0 (CVSS 7.5)
- [CVE-2026-88853](https://cve.now/CVE-2026-88853.md): Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla \< 17.0.0 (CVSS 7.5)
- [CVE-2026-85191](https://cve.now/CVE-2026-85191.md): Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option in Tabs & Accordions extension for Joomla \< 3.1.0 (CVSS 7.5)
- [CVE-2026-85188](https://cve.now/CVE-2026-85188.md): Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager (Free, Pro) \< 12.1.0, Conditional Content (Free, Pro) \< 8.0.0, Content Templater (Pro) \< 14.2.0, ReReplacer (Pro) \< 16.2.0 for Joomla (CVSS 6.9)
- [CVE-2026-74253](https://cve.now/CVE-2026-74253.md): Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer \< 16.0.0 (CVSS 10.0)
- [CVE-2026-65713](https://cve.now/CVE-2026-65713.md): Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension (CVSS 6.5)
- [CVE-2026-64873](https://cve.now/CVE-2026-64873.md): Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension (CVSS 9.8)
- [CVE-2026-64871](https://cve.now/CVE-2026-64871.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension (CVSS 5.4)
- [CVE-2026-65757](https://cve.now/CVE-2026-65757.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension (CVSS 8.1)
- [CVE-2026-65755](https://cve.now/CVE-2026-65755.md): Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension (CVSS 7.5)
- [CVE-2026-65754](https://cve.now/CVE-2026-65754.md): Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension (CVSS 7.5)
- [CVE-2026-64875](https://cve.now/CVE-2026-64875.md): Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension (CVSS 6.5)
- [CVE-2026-64876](https://cve.now/CVE-2026-64876.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension (CVSS 8.8)
- [CVE-2026-64872](https://cve.now/CVE-2026-64872.md): Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension (CVSS 6.5)
- [CVE-2026-65712](https://cve.now/CVE-2026-65712.md): Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension (CVSS 6.2)
- [CVE-2026-65756](https://cve.now/CVE-2026-65756.md): Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension (CVSS 6.1)
- [CVE-2026-64874](https://cve.now/CVE-2026-64874.md): Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension (CVSS 9.8)
- [CVE-2026-64799](https://cve.now/CVE-2026-64799.md): Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions (CVSS 7.5)
- [CVE-2026-65430](https://cve.now/CVE-2026-65430.md): Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension (CVSS 7.5)
- [CVE-2026-65431](https://cve.now/CVE-2026-65431.md): Joomla Extension - regularlabs.com - Zipslip in GeoIP extension (CVSS 9.8)
- [CVE-2026-64793](https://cve.now/CVE-2026-64793.md): Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions (CVSS 9.1)
- [CVE-2026-64794](https://cve.now/CVE-2026-64794.md): Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions (CVSS 6.5)
- [CVE-2026-64797](https://cve.now/CVE-2026-64797.md): Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension (CVSS 7.5)
- [CVE-2026-63265](https://cve.now/CVE-2026-63265.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints (CVSS 8.0)
- [CVE-2026-63685](https://cve.now/CVE-2026-63685.md): Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension (CVSS 8.8)
- [CVE-2026-63280](https://cve.now/CVE-2026-63280.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager (CVSS 8.8)
- [CVE-2026-64796](https://cve.now/CVE-2026-64796.md): Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension (CVSS 9.8)
- [CVE-2026-63683](https://cve.now/CVE-2026-63683.md): Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager (CVSS 7.5)
- [CVE-2026-64798](https://cve.now/CVE-2026-64798.md): Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension (CVSS 9.1)
- [CVE-2026-64795](https://cve.now/CVE-2026-64795.md): Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions (CVSS 5.4)
- [CVE-2026-64792](https://cve.now/CVE-2026-64792.md): Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions (CVSS 7.5)
- [CVE-2026-63281](https://cve.now/CVE-2026-63281.md): Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager (CVSS 4.8)
- [CVE-2026-64791](https://cve.now/CVE-2026-64791.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager (CVSS 8.8)
- [CVE-2026-63684](https://cve.now/CVE-2026-63684.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension (CVSS 8.8)
- [CVE-2025-22204](https://cve.now/CVE-2025-22204.md): Extension - regularlabs.com - Remote code execution vulnerability in the Sourcerer extensions \< 12.0.0 for Joomla (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/regularlabs-com
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.