CVE-2026-63265 PUBLISHED

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints

Assigner: Joomla
Reserved: 16.07.2026 Published: 22.07.2026 Updated: 23.07.2026

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.

Product Status

Vendor regularlabs.com
Product Advanced Module Manager extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-11.0.1 is affected
Vendor regularlabs.com
Product Articles Anywhere extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-18.0.2 is affected
Vendor regularlabs.com
Product Articles Field extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-4.7.1 is affected
Vendor regularlabs.com
Product Better Frontend Link extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-2.2.5 is affected
Vendor regularlabs.com
Product Cache Cleaner extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-9.7.6 is affected
Vendor regularlabs.com
Product CDN for Joomla extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-7.3.7 is affected
Vendor regularlabs.com
Product Conditional Content extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-6.0.0 is affected
Vendor regularlabs.com
Product Content Templater extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-13.0.0 is affected
Vendor regularlabs.com
Product DB Replacer extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-8.2.7 is affected
Vendor regularlabs.com
Product Email Protector extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-6.3.7 is affected
Vendor regularlabs.com
Product Regular Labs Extension Manager extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-9.2.5 is affected
Vendor regularlabs.com
Product GeoIP extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-6.3.8 is affected
Vendor regularlabs.com
Product IP Login extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-6.2.5 is affected
Vendor regularlabs.com
Product Keyboard Shortcuts extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-3.2.5 is affected
Vendor regularlabs.com
Product Modals extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-15.0.0 is affected
Vendor regularlabs.com
Product Modules Anywhere extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-8.4.1 is affected
Vendor regularlabs.com
Product Quick Index extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-4.3.6 is affected
Vendor regularlabs.com
Product ReReplacer extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-15.0.3 is affected
Vendor regularlabs.com
Product Snippets extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-9.3.10 is affected
Vendor regularlabs.com
Product Sourcerer extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-12.2.8 is affected
Vendor regularlabs.com
Product Tooltips extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-9.4.7 is affected
Vendor regularlabs.com
Product Users Anywhere extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-1.2.7 is affected
Vendor regularlabs.com
Product What? Nothing! extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-17.2.5 is affected

References

Problem Types

  • CWE-352 Cross-Site Request Forgery (CSRF) CWE
  • CWE-284 Improper Access Control CWE