What’s Vulnerable › Vulnerabilities

CVE-2026-63280: Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-22 · updated 2026-10-24
• Weakness: CWE-284

Description

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions.

Affected products

• regularlabs.com Advanced Module Manager extension for Joomla: 1.0.0-11.0.1
• regularlabs.com Conditional Content extension for Joomla: 1.0.0-6.0.0
• regularlabs.com Content Templater Pro extension for Joomla: 1.0.0-13.0.0
• regularlabs.com ReReplacer extension Pro for Joomla: 1.0.0-15.0.3

References

• https://regularlabs.com/

Get alerted when CVE-2026-63280 or the next vulnerability affects your stack