Security Flaw in Regular Labs Extensions for WordPress
CVE-2026-64791
Currently unrated
What is CVE-2026-64791?
A vulnerability exists within Regular Labs extensions for WordPress due to insufficient enforcement of component-management and installation permissions. This flaw allows unauthorized backend users to execute critical operations such as installing, updating, or uninstalling extensions. Additionally, potential Cross-Site Request Forgery (CSRF) attacks could exploit this weakness, further endangering site security and integrity. It is crucial for users to be aware of this issue and apply necessary precautions to safeguard their websites.
Affected Version(s)
Regular Labs Extension Manager extension for Joomla 1.0.0-9.2.5
