CSRF Vulnerability in Regular Labs Joomla Extensions
CVE-2026-63684

8.8HIGH

Key Information:

Vendor

Regularlabs.com

Status
Content Templater Extension For Joomla
Rereplacer Extension For Joomla
Snippets Extension For Joomla
Vendor
CVE Published:
22 July 2026

What is CVE-2026-63684?

A security flaw exists in Regular Labs Joomla extensions due to inconsistent token validation, item permissions, and input checks on administrator actions, editor popups, and import/export requests. This allows unauthorized users to perform actions that could expose, create, or modify extension configurations and items, posing a significant risk to system integrity.

Affected Version(s)

Content Templater extension for Joomla 1.0.0-13.0.0

ReReplacer extension for Joomla 1.0.0-15.0.3

Snippets extension for Joomla 1.0.0-9.3.10

References

https://regularlabs.com/
product

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.