CVE-2026-64794 PUBLISHED

Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions

Assigner: Joomla
Reserved: 20.07.2026 Published: 22.07.2026 Updated: 23.07.2026

Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions - User tags, filters and conditions allowed access to insufficiently restricted user fields. Crafted content could expose authentication-related data, raw user parameters or restricted contact details.

Product Status

Vendor regularlabs.com
Product Articles Anywhere extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-18.0.2 is affected
Vendor regularlabs.com
Product Users Anywhere extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-1.2.7 is affected

References

Problem Types

  • CWE-284 Improper Access Control CWE