CVE-2026-64792

Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.

Score

CVSS 3.1 7.5 High

Status

Deferred - security@joomla.org

Published

2026-07-22

Last modified

2026-10-24

Weaknesses

CWE-524

Affected products

• Articles Anywhere Extension For Joomla (Regularlabs.com)
• Conditional Content Extension For Joomla (Regularlabs.com)
• Modules Anywhere Extension For Joomla (Regularlabs.com)
• Rereplacer Extension For Joomla (Regularlabs.com)
• Snippets Pro Extension For Joomla (Regularlabs.com)
• Sourcerer Extension For Joomla (Regularlabs.com)
• Tabs Accordions Pro Extension For Joomla (Regularlabs.com)

References

• https://regularlabs.com/