CVE-2026-63684 PUBLISHED

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension

Assigner: Joomla
Reserved: 17.07.2026 Published: 22.07.2026 Updated: 23.07.2026

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension - Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation checks. Unauthorized backend users or CSRF attacks could expose, create or modify extension configuration and items.

Product Status

Vendor regularlabs.com
Product Content Templater extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-13.0.0 is affected
Vendor regularlabs.com
Product ReReplacer extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-15.0.3 is affected
Vendor regularlabs.com
Product Snippets extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-9.3.10 is affected

References

Problem Types

  • CWE-352 Cross-Site Request Forgery (CSRF) CWE
  • CWE-284 Improper Access Control CWE