Approved changes feed: RSS · Atom

cpe:2.3:a:regularlabs.com:users_anywhere_extension_for_joomla:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRegularlabs.Com (738da9fd-b178-52c4-917b-e11dbc67f76c)
ProductUsers Anywhere Extension For Joomla (a686544f-21bd-5f44-885e-96432ac13277)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-65755 vulnerable 2026-07-29 01:06:20.237736 Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension
Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension - Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or expiry boundaries, potentially exposing content after it should become unavailable.
Published: 2026-07-23T09:14:11.923Z
Updated: 2026-07-29T05:40:11.634Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-64794 vulnerable 2026-07-29 01:06:19.847776 Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions
Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions - User tags, filters and conditions allowed access to insufficiently restricted user fields. Crafted content could expose authentication-related data, raw user parameters or restricted contact details.
Published: 2026-07-22T20:45:24.135Z
Updated: 2026-07-27T13:34:11.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-63265 vulnerable 2026-07-29 01:06:19.399536 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.
Published: 2026-07-22T20:44:05.164Z
Updated: 2026-07-28T05:35:26.645Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.