CSRF Vulnerability in Regular Labs AJAX Endpoints Affecting Privileged Access
CVE-2026-63265

Currently unrated

Key Information:

Vendor: Regularlabs.com
Status: Advanced Module Manager Extension For Joomla; Articles Anywhere Extension For Joomla; Articles Field Extension For Joomla; Better Frontend Link Extension For Joomla
Vendor: CVE Published:; 22 July 2026

🔔 Create Regularlabs.com Vulnerability Alert

What is CVE-2026-63265?

A security weakness in Regular Labs AJAX endpoints was identified where valid CSRF tokens were not consistently enforced. This vulnerability allows authenticated users with lower privileges to perform actions or access data beyond their authorization level. It poses a significant risk as malicious actors can exploit this weakness to engage in unauthorized lookups or modifications, leading to potential data breaches and compromised system integrity.

Affected Version(s)

Advanced Module Manager extension for Joomla 1.0.0-11.0.1

Articles Anywhere extension for Joomla 1.0.0-18.0.2

Articles Field extension for Joomla 1.0.0-4.7.1

References

https://regularlabs.com/

product

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 22, 2026
Vulnerability Reserved
Jul 16, 2026

CVE-2026-63265 Data

JSON