Regularlabs - vulnerabilities (CVEs)

3 CVEs in 3 products, 0 in the last 30 days, newest from 2026-09-28.

Products

• Modules Anywhere - 1 CVEs
• Sourcerer - 1 CVEs
• Tabs & Accordions - 1 CVEs

Newest CVEs of Regularlabs

• CVE-2026-100750 - CVSS 8.5 (high), 2026-09-28: Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag…
• CVE-2026-100751 - CVSS 7.5 (high), 2026-09-28: Joomla Extension - regularlabs.com - Privileged stored XSS via data-rlta-url attributes in Tabs & Accordions (Pro) 2.3.0 - 3.1.0 - Tabs & Accordions Pro…
• CVE-2025-22204 - CVSS 9.8 (critical), 2025-02-04: Improper control of generation of code in the sourcerer extension for Joomla in versions before 11.0.0 lead to a remote code execution vulnerability.