CVE-2026-64871 PUBLISHED

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension

Assigner: Joomla
Reserved: 20.07.2026 Published: 23.07.2026 Updated: 23.07.2026

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension - Administrator URL purges did not consistently require a valid token and cache-management permission.

Product Status

Vendor regularlabs.com
Product Cache Cleaner extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-9.7.6 is affected

References

Problem Types

  • CWE-352 Cross-Site Request Forgery (CSRF) CWE
  • CWE-284 Improper Access Control CWE