Security Flaw in Regular Labs Extensions for WordPress
CVE-2026-64791

8.8HIGH

Key Information:

Vendor

Regularlabs.com

Status
Regular Labs Extension Manager Extension For Joomla
Vendor
CVE Published:
22 July 2026

What is CVE-2026-64791?

A vulnerability exists within Regular Labs extensions for WordPress due to insufficient enforcement of component-management and installation permissions. This flaw allows unauthorized backend users to execute critical operations such as installing, updating, or uninstalling extensions. Additionally, potential Cross-Site Request Forgery (CSRF) attacks could exploit this weakness, further endangering site security and integrity. It is crucial for users to be aware of this issue and apply necessary precautions to safeguard their websites.

Affected Version(s)

Regular Labs Extension Manager extension for Joomla 1.0.0-9.2.5

References

https://regularlabs.com/
product

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.