Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Joomla Extension - Regular Labs: Sensitive Content Leaked via Search

CVE-2026-64792 · published 3 months ago
Summary

Certain Joomla extensions from Regular Labs may leak sensitive information through their search feature. This is a concern because it could expose restricted content to visitors. To address this issue, update your Joomla extensions from Regular Labs to the latest version.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
regularlabs.com articles anywhere extension for joomla 1.0.0-18.0.2
regularlabs.com conditional content extension for joomla 1.0.0-6.0.0
regularlabs.com modules anywhere extension for joomla 1.0.0-8.4.1
regularlabs.com rereplacer extension for joomla 1.0.0-15.0.3
regularlabs.com sourcerer extension for joomla 1.0.0-12.2.8
regularlabs.com tabs & accordions pro extension for joomla 1.0.0-2.5.6
regularlabs.com snippets pro extension for joomla 1.0.0-9.3.10
Original advisory text
Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions
Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-524Use of Cache Containing Sensitive Information
Timeline
Published22 Jul 2026
Updated4 Nov 2026
First seen22 Jul 2026
Sources
CVE-2026-64792 · NVD
CVE-2026-64792 · MITRE
Track software like this
Free during beta