{"schema_version":1,"title":"Regular Labs vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 38 vulnerabilities in Regular Labs: 0 in the last 7 days and 38 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-88853, was published on 14 September 2026. 11 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/regular-labs","json_url":"https://junglewise.ai/threats/vendors/regular-labs.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/regular-labs","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":0,"all_time":38,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":9,"last_90_days":38,"last_365_days":38},"latest":[{"cve":"CVE-2026-88853","cvss":6.3,"epss":0.0042,"slug":"cve-2026-88853-regular-labs-modals-pro-stored-xss-via-event-handler","title":"Regular Labs Modals Pro stored XSS via event handler","severity":"info","exploited":false,"published_at":"2026-09-14T07:17:24.383+00:00","url":"https://junglewise.ai/threats/cve-2026-88853-regular-labs-modals-pro-stored-xss-via-event-handler"},{"cve":"CVE-2026-88852","cvss":0,"epss":0.0042,"slug":"cve-2026-88852-regular-labs-snippets-stored-xss-via-url-option","title":"Regular Labs Snippets stored XSS via url option","severity":"info","exploited":false,"published_at":"2026-09-14T07:17:24.25+00:00","url":"https://junglewise.ai/threats/cve-2026-88852-regular-labs-snippets-stored-xss-via-url-option"},{"cve":"CVE-2026-85196","epss":0.0044,"slug":"cve-2026-85196-regular-labs-articles-anywhere-and-users-anywhere-reflected-xss","title":"Regular Labs Articles Anywhere and Users Anywhere reflected XSS","severity":"info","exploited":false,"published_at":"2026-09-14T07:17:23.017+00:00","url":"https://junglewise.ai/threats/cve-2026-85196-regular-labs-articles-anywhere-and-users-anywhere-reflected-xss"},{"cve":"CVE-2026-85195","epss":0.0042,"slug":"cve-2026-85195-regular-labs-articles-anywhere-stored-xss-via-link-option","title":"Regular Labs Articles Anywhere stored XSS via link option","severity":"info","exploited":false,"published_at":"2026-09-14T07:17:22.887+00:00","url":"https://junglewise.ai/threats/cve-2026-85195-regular-labs-articles-anywhere-stored-xss-via-link-option"},{"cve":"CVE-2026-85192","cvss":7.2,"epss":0.0067,"slug":"cve-2026-85192-regular-labs-conditional-content-authenticated-remote-code","title":"Regular Labs Conditional Content authenticated remote code execution in Joomla","severity":"info","exploited":false,"published_at":"2026-09-14T07:17:22.757+00:00","url":"https://junglewise.ai/threats/cve-2026-85192-regular-labs-conditional-content-authenticated-remote-code"},{"cve":"CVE-2026-85191","epss":0.0042,"slug":"cve-2026-85191-regular-labs-tabs-accordions-stored-xss-in-rtla-alias-option","title":"Regular Labs Tabs & Accordions stored XSS in rtla-alias option","severity":"info","exploited":false,"published_at":"2026-09-14T07:17:22.627+00:00","url":"https://junglewise.ai/threats/cve-2026-85191-regular-labs-tabs-accordions-stored-xss-in-rtla-alias-option"},{"cve":"CVE-2026-85190","epss":0.0042,"slug":"cve-2026-85190-regular-labs-quick-index-stored-xss-via-unescaped-class-attribute","title":"Regular Labs Quick Index stored XSS via unescaped class attribute","severity":"info","exploited":false,"published_at":"2026-09-14T07:17:22.49+00:00","url":"https://junglewise.ai/threats/cve-2026-85190-regular-labs-quick-index-stored-xss-via-unescaped-class-attribute"},{"cve":"CVE-2026-85189","cvss":5.4,"epss":0.0042,"slug":"cve-2026-85189-regular-labs-modals-stored-xss-via-executable-url-schemes","title":"Regular Labs Modals stored XSS via executable URL schemes","severity":"info","exploited":false,"published_at":"2026-09-14T07:17:22.357+00:00","url":"https://junglewise.ai/threats/cve-2026-85189-regular-labs-modals-stored-xss-via-executable-url-schemes"},{"cve":"CVE-2026-85188","epss":0.0037,"slug":"cve-2026-85188-regular-labs-advanced-module-manager-database-disclosure-in","title":"Regular Labs Advanced Module Manager database disclosure in Conditions editor","severity":"info","exploited":false,"published_at":"2026-09-14T07:17:22.203+00:00","url":"https://junglewise.ai/threats/cve-2026-85188-regular-labs-advanced-module-manager-database-disclosure-in"},{"cve":"CVE-2026-74253","epss":0.0044,"slug":"cve-2026-74253-regular-labs-sourcerer-rce-in-unverified-reflected-input","title":"Regular Labs Sourcerer RCE in unverified reflected input","severity":"info","exploited":false,"published_at":"2026-08-17T18:18:14.78+00:00","url":"https://junglewise.ai/threats/cve-2026-74253-regular-labs-sourcerer-rce-in-unverified-reflected-input"},{"cve":"CVE-2026-65757","slug":"cve-2026-65757-regular-labs-modules-anywhere-improper-access-control-in-editor","title":"Regular Labs Modules Anywhere improper access control in editor popup","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:53.353+00:00","url":"https://junglewise.ai/threats/cve-2026-65757-regular-labs-modules-anywhere-improper-access-control-in-editor"},{"cve":"CVE-2026-65756","cvss":0,"slug":"cve-2026-65756-regular-labs-keyboard-shortcuts-for-joomla-xss-in-shortcut","title":"Regular Labs Keyboard Shortcuts for Joomla XSS in shortcut configuration","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:53.253+00:00","url":"https://junglewise.ai/threats/cve-2026-65756-regular-labs-keyboard-shortcuts-for-joomla-xss-in-shortcut"},{"cve":"CVE-2026-65755","slug":"cve-2026-65755-regular-labs-joomla-extensions-information-exposure-via-improper","title":"Regular Labs Joomla extensions information exposure via improper caching","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:53.143+00:00","url":"https://junglewise.ai/threats/cve-2026-65755-regular-labs-joomla-extensions-information-exposure-via-improper"},{"cve":"CVE-2026-65754","slug":"cve-2026-65754-regular-labs-rereplacer-pro-path-traversal-in-xml-include-paths","title":"Regular Labs ReReplacer Pro path traversal in XML include paths","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:53.037+00:00","url":"https://junglewise.ai/threats/cve-2026-65754-regular-labs-rereplacer-pro-path-traversal-in-xml-include-paths"},{"cve":"CVE-2026-65713","slug":"cve-2026-65713-regular-labs-modals-pro-path-traversal-in-gallery-paths","title":"Regular Labs Modals Pro path traversal in gallery paths","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:52.93+00:00","url":"https://junglewise.ai/threats/cve-2026-65713-regular-labs-modals-pro-path-traversal-in-gallery-paths"},{"cve":"CVE-2026-65712","slug":"cve-2026-65712-regular-labs-cdn-for-joomla-pro-path-traversal-in-cdn-versioning","title":"Regular Labs CDN for Joomla Pro path traversal in CDN versioning","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:52.82+00:00","url":"https://junglewise.ai/threats/cve-2026-65712-regular-labs-cdn-for-joomla-pro-path-traversal-in-cdn-versioning"},{"cve":"CVE-2026-65431","slug":"cve-2026-65431-regular-labs-geoip-extension-for-joomla-path-traversal-in","title":"Regular Labs GeoIP extension for Joomla path traversal in database updates","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:52.723+00:00","url":"https://junglewise.ai/threats/cve-2026-65431-regular-labs-geoip-extension-for-joomla-path-traversal-in"},{"cve":"CVE-2026-65430","cvss":0,"slug":"cve-2026-65430-regular-labs-geoip-extension-for-joomla-credential-leakage-in","title":"Regular Labs GeoIP extension for Joomla credential leakage in request URLs","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:52.613+00:00","url":"https://junglewise.ai/threats/cve-2026-65430-regular-labs-geoip-extension-for-joomla-credential-leakage-in"},{"cve":"CVE-2026-64876","cvss":0,"slug":"cve-2026-64876-regular-labs-geoip-extension-for-joomla-improper-access-control","title":"Regular Labs GeoIP extension for Joomla improper access control in database updates","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:52.51+00:00","url":"https://junglewise.ai/threats/cve-2026-64876-regular-labs-geoip-extension-for-joomla-improper-access-control"},{"cve":"CVE-2026-64875","cvss":0,"slug":"cve-2026-64875-regular-labs-geoip-extension-for-joomla-geoip-rule-bypass-via-ip","title":"Regular Labs GeoIP extension for Joomla GeoIP-rule bypass via IP spoofing","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:52.4+00:00","url":"https://junglewise.ai/threats/cve-2026-64875-regular-labs-geoip-extension-for-joomla-geoip-rule-bypass-via-ip"},{"cve":"CVE-2026-64874","cvss":0,"slug":"cve-2026-64874-regular-labs-cache-cleaner-pro-credential-exposure-in-request","title":"Regular Labs Cache Cleaner Pro credential exposure in request URLs","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:52.297+00:00","url":"https://junglewise.ai/threats/cve-2026-64874-regular-labs-cache-cleaner-pro-credential-exposure-in-request"},{"cve":"CVE-2026-64873","cvss":0,"slug":"cve-2026-64873-regular-labs-cache-cleaner-pro-ssrf-via-custom-query-urls","title":"Regular Labs Cache Cleaner Pro SSRF via custom query URLs","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:52.193+00:00","url":"https://junglewise.ai/threats/cve-2026-64873-regular-labs-cache-cleaner-pro-ssrf-via-custom-query-urls"},{"cve":"CVE-2026-64872","slug":"cve-2026-64872-regular-labs-cache-cleaner-pro-path-traversal-in-custom-purge-and","title":"Regular Labs Cache Cleaner Pro path traversal in custom purge and log paths","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:52.087+00:00","url":"https://junglewise.ai/threats/cve-2026-64872-regular-labs-cache-cleaner-pro-path-traversal-in-custom-purge-and"},{"cve":"CVE-2026-64871","cvss":0,"slug":"cve-2026-64871-regular-labs-cache-cleaner-for-joomla-improper-access-control-in","title":"Regular Labs Cache Cleaner for Joomla improper access control in URL purges","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:51.98+00:00","url":"https://junglewise.ai/threats/cve-2026-64871-regular-labs-cache-cleaner-for-joomla-improper-access-control-in"},{"cve":"CVE-2026-64799","cvss":0,"slug":"cve-2026-64799-regular-labs-joomla-extensions-ssrf-and-file-write-via-image-urls","title":"Regular Labs Joomla extensions SSRF and file write via image URLs","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:51.867+00:00","url":"https://junglewise.ai/threats/cve-2026-64799-regular-labs-joomla-extensions-ssrf-and-file-write-via-image-urls"}],"vendor":{"hub":true,"name":"Regular Labs","slug":"regular-labs","homepage":"https://www.regularlabs.com/","description":"A developer of extensions and tools for the Joomla content management system.","url":"https://junglewise.ai/threats/vendors/regular-labs"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":28},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":9},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-85192","cvss":7.2,"epss":0.0067,"slug":"cve-2026-85192-regular-labs-conditional-content-authenticated-remote-code","title":"Regular Labs Conditional Content authenticated remote code execution in Joomla","severity":"info","exploited":false,"published_at":"2026-09-14T07:17:22.757+00:00","url":"https://junglewise.ai/threats/cve-2026-85192-regular-labs-conditional-content-authenticated-remote-code"},{"cve":"CVE-2026-88853","cvss":6.3,"epss":0.0042,"slug":"cve-2026-88853-regular-labs-modals-pro-stored-xss-via-event-handler","title":"Regular Labs Modals Pro stored XSS via event handler","severity":"info","exploited":false,"published_at":"2026-09-14T07:17:24.383+00:00","url":"https://junglewise.ai/threats/cve-2026-88853-regular-labs-modals-pro-stored-xss-via-event-handler"},{"cve":"CVE-2026-85189","cvss":5.4,"epss":0.0042,"slug":"cve-2026-85189-regular-labs-modals-stored-xss-via-executable-url-schemes","title":"Regular Labs Modals stored XSS via executable URL schemes","severity":"info","exploited":false,"published_at":"2026-09-14T07:17:22.357+00:00","url":"https://junglewise.ai/threats/cve-2026-85189-regular-labs-modals-stored-xss-via-executable-url-schemes"},{"cve":"CVE-2026-88852","cvss":0,"epss":0.0042,"slug":"cve-2026-88852-regular-labs-snippets-stored-xss-via-url-option","title":"Regular Labs Snippets stored XSS via url option","severity":"info","exploited":false,"published_at":"2026-09-14T07:17:24.25+00:00","url":"https://junglewise.ai/threats/cve-2026-88852-regular-labs-snippets-stored-xss-via-url-option"},{"cve":"CVE-2026-65756","cvss":0,"slug":"cve-2026-65756-regular-labs-keyboard-shortcuts-for-joomla-xss-in-shortcut","title":"Regular Labs Keyboard Shortcuts for Joomla XSS in shortcut configuration","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:53.253+00:00","url":"https://junglewise.ai/threats/cve-2026-65756-regular-labs-keyboard-shortcuts-for-joomla-xss-in-shortcut"},{"cve":"CVE-2026-65430","cvss":0,"slug":"cve-2026-65430-regular-labs-geoip-extension-for-joomla-credential-leakage-in","title":"Regular Labs GeoIP extension for Joomla credential leakage in request URLs","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:52.613+00:00","url":"https://junglewise.ai/threats/cve-2026-65430-regular-labs-geoip-extension-for-joomla-credential-leakage-in"},{"cve":"CVE-2026-64876","cvss":0,"slug":"cve-2026-64876-regular-labs-geoip-extension-for-joomla-improper-access-control","title":"Regular Labs GeoIP extension for Joomla improper access control in database updates","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:52.51+00:00","url":"https://junglewise.ai/threats/cve-2026-64876-regular-labs-geoip-extension-for-joomla-improper-access-control"},{"cve":"CVE-2026-64875","cvss":0,"slug":"cve-2026-64875-regular-labs-geoip-extension-for-joomla-geoip-rule-bypass-via-ip","title":"Regular Labs GeoIP extension for Joomla GeoIP-rule bypass via IP spoofing","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:52.4+00:00","url":"https://junglewise.ai/threats/cve-2026-64875-regular-labs-geoip-extension-for-joomla-geoip-rule-bypass-via-ip"},{"cve":"CVE-2026-64874","cvss":0,"slug":"cve-2026-64874-regular-labs-cache-cleaner-pro-credential-exposure-in-request","title":"Regular Labs Cache Cleaner Pro credential exposure in request URLs","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:52.297+00:00","url":"https://junglewise.ai/threats/cve-2026-64874-regular-labs-cache-cleaner-pro-credential-exposure-in-request"},{"cve":"CVE-2026-64873","cvss":0,"slug":"cve-2026-64873-regular-labs-cache-cleaner-pro-ssrf-via-custom-query-urls","title":"Regular Labs Cache Cleaner Pro SSRF via custom query URLs","severity":"info","exploited":false,"published_at":"2026-07-23T10:16:52.193+00:00","url":"https://junglewise.ai/threats/cve-2026-64873-regular-labs-cache-cleaner-pro-ssrf-via-custom-query-urls"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Regular Labs Articles-Anywhere","slug":"articles-anywhere","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/articles-anywhere"},{"name":"Regular Labs Conditional Content","slug":"conditional-content","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/conditional-content"},{"name":"Regular Labs Advanced Module Manager","slug":"advanced-module-manager","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/advanced-module-manager"},{"name":"Regular Labs GeoIP","slug":"geoip","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/geoip"},{"name":"Regular Labs Rereplacer-Pro","slug":"rereplacer-pro","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/rereplacer-pro"},{"name":"Regular Labs Cache Cleaner Pro","slug":"cache-cleaner-pro","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/cache-cleaner-pro"},{"name":"Regular Labs Content Templater Pro","slug":"content-templater-pro","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/content-templater-pro"},{"name":"Regular Labs Modules-Anywhere","slug":"modules-anywhere","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/modules-anywhere"},{"name":"Regular Labs ReReplacer","slug":"rereplacer","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/rereplacer"},{"name":"Regular Labs Sourcerer","slug":"sourcerer","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/sourcerer"},{"name":"Regular Labs Users-Anywhere","slug":"users-anywhere","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/users-anywhere"}]}