These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-100751 is a high-severity vulnerability in the Joomla Extension - regularlabs.com - Privileged stored XSS via data-rlta-url attributes in Tabs & Accordions (Pro) 2.3.0 - 3.1.0. The vulnerability allows for JavaScript execution when a user activates an item. Defenders should assess exposure, prioritize remediation, and verify affected versions.
CVE-2026-100750 is a high-severity vulnerability in Joomla's Modules Anywhere extension, allowing for local file inclusion (LFI) and server-side request forgery (SSRF). The vulnerability affects versions 1.5.0 to 9.0.5 of the Modules Anywhere extension. An attacker can exploit this vulnerability by adding attributes to a module tag, which can replace arbitrary parameters of the selected module. The securi [truncated]
The CVE-2026-65757 vulnerability in the Joomla Extension - regularlabs.com - Modules Anywhere extension could expose restricted module data to authenticated users without the required module permissions or valid request tokens. This issue has a CVSS score of 8.1 and is considered HIGH severity. The CVE record was published on 2026-07-23T10:16:53.353Z and was last modified on 2026-10-24T13:10:00.147Z.
The CVE-2026-65756 vulnerability is a cross-site scripting (XSS) issue in the Joomla Extension - regularlabs.com - Keyboard Shortcuts extension. The extension accepted arbitrary inline JavaScript in its shortcut configuration. This vulnerability has a CVSS score of 6.1 and a severity of MEDIUM. Defenders responsible for Joomla installations should be aware of this vulnerability and assess the exposure of [truncated]
The CVE-2026-65755 vulnerability is related to date-sensitive query-cache leakage in Joomla's Articles Anywhere and Users Anywhere extensions. This issue allows cached results to remain active across future publication or expiry boundaries, potentially exposing content after it should become unavailable. Organizations using Joomla and these extensions should verify their versions and apply patches to prev [truncated]
The ReReplacer Pro extension for Joomla is vulnerable to insecure path handling, potentially allowing for file reads outside the site directory. This issue affects Joomla users with the ReReplacer Pro extension installed. The vulnerability was published on 2026-07-23T10:16:53.037Z and has not been modified since then. The CVE record indicates an insecure path handling issue, and users should verify their [truncated]
CVE-2026-65713 is a medium-severity vulnerability in the Modals Pro extension for Joomla, allowing attackers to enumerate unintended directories through insecure path handling. This could lead to potential directory enumeration and information disclosure through directory traversal. Joomla administrators and security teams should assess exposure, verify version information, and monitor for potential direc [truncated]
The CVE-2026-65712 vulnerability involves insecure path handling in the CDN for Joomla Pro extension, potentially allowing attackers to check file paths outside the site directory. This could expose local file existence and modification metadata. Joomla Pro extension users, system administrators, and security teams should assess exposure and verify file path handling to prevent potential security risks. V [truncated]
A Zipslip vulnerability was found in the Joomla Extension GeoIP. Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions. This vulnerability has a CVSS score of 9.8 and is classified as CRITICAL. Administrators and users of Joomla Extension GeoIP should be aware of this vulnerability and take necessary actions to secure their installations. T [truncated]
CVE-2026-65430 is a HIGH severity vulnerability in the Joomla Extension - regularlabs.com - MaxMind Credential leakage. The vulnerability has a CVSS score of 7.5 and was published on 2026-07-23T10:16:52.613Z. The vulnerability is caused by MaxMind credentials being leaked in request URLs, causing a credential leakage vulnerability. Administrators and users of Joomla Extension - regularlabs.com - MaxMind C [truncated]
The CVE-2026-64876 record details a vulnerability in the GeoIP extension for Joomla, stemming from inconsistent CSRF token checks and privilege checks. This weakness could allow unauthorized updates to the GeoIP extension's database, potentially impacting the security and integrity of Joomla installations that use this extension. The vulnerability was published on 2026-07-23T10:16:52.510Z. The issue may a [truncated]
A medium severity vulnerability was found in the GeoIP extension for Joomla, which trusts spoofable forwarded client-IP headers, potentially allowing for GeoIP-rule bypass. This vulnerability has a CVSS score of 6.5 and is classified as medium severity. Administrators and users of the Joomla platform with the GeoIP extension installed should be aware of this vulnerability and take necessary actions to mit [truncated]
The CVE record for CVE-2026-64874 was published on 2026-07-23T10:16:52.297Z and has not been modified since then. The NVD entry is currently Deferred. This vulnerability affects Joomla installations using the Cache Cleaner Pro extension from regularlabs.com, potentially allowing unauthorized access to sensitive data due to exposed CDN credentials in administrator request URLs.
The CVE-2026-64873 vulnerability is a Server-Side Request Forgery (SSRF) issue in the Cache Cleaner Pro extension for Joomla, allowing custom query URLs to access internal or reserved network services. This critical vulnerability has a CVSS score of 9.8. Defenders should assess exposure and potential impact, focusing on systems using the affected extension. The vulnerability allows attackers to access int [truncated]
A path traversal vulnerability exists in the Cache Cleaner Pro extension for Joomla, allowing custom purge and log paths to escape the site webroot directory. This issue, tracked as CVE-2026-64872, was made public on 2026-07-23 and last modified on 2026-10-24. Defenders should prioritize verifying and updating the Cache Cleaner Pro extension to prevent potential path traversal attacks. Joomla site adminis [truncated]
The CVE-2026-64871 vulnerability affects the Joomla Extension - regularlabs.com - Cache Cleaner extension. Administrator URL purges did not consistently require a valid token and cache-management permission. This inconsistency in CSRF token checks and privilege checks could potentially allow unauthorized actions. The vulnerability has a CVSS score of 5.4 and is considered MEDIUM severity. Defenders should [truncated]
CVE-2026-64799 is a high-severity vulnerability in Joomla Extensions Articles Anywhere and Users Anywhere. The vulnerability allows for Server-Side Request Forgery (SSRF) via remote image downloads. Content-controlled image URLs could request private or reserved network services, follow unsafe redirects, and save responses without validating that they were images. This could result in SSRF, internal-data [truncated]