CSRF Vulnerability in Regular Labs Joomla Extensions
CVE-2026-63684

Currently unrated

Key Information:

Vendor: Regularlabs.com
Status: Content Templater Extension For Joomla; Rereplacer Extension For Joomla; Snippets Extension For Joomla
Vendor: CVE Published:; 22 July 2026

🔔 Create Regularlabs.com Vulnerability Alert

What is CVE-2026-63684?

A security flaw exists in Regular Labs Joomla extensions due to inconsistent token validation, item permissions, and input checks on administrator actions, editor popups, and import/export requests. This allows unauthorized users to perform actions that could expose, create, or modify extension configurations and items, posing a significant risk to system integrity.

Affected Version(s)

Content Templater extension for Joomla 1.0.0-13.0.0

ReReplacer extension for Joomla 1.0.0-15.0.3

Snippets extension for Joomla 1.0.0-9.3.10

References

https://regularlabs.com/

product

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 22, 2026
Vulnerability Reserved
Jul 17, 2026

CVE-2026-63684 Data

JSON