# Regular Labs vulnerabilities Source: https://junglewise.ai/threats/vendors/regular-labs Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 10 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/regular-labs.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 42 vulnerabilities in Regular Labs: 0 in the last 7 days and 14 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-102802, was published on 2 November 2026. 2 vulnerabilities in the last four weeks, down 82% on the four before (11). 11 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 2 - Last 90 days: 14 - All time: 42 (0 critical, 0 exploited in the wild) ## About Regular Labs A developer of extensions and tools for the Joomla content management system. ## Latest Regular Labs vulnerabilities - [CVE-2026-102802: Joomla Sourcerer PHP code injection via Articles Anywhere](https://junglewise.ai/threats/cve-2026-102802-joomla-extension-regularlabs-com-php-code-injection-vector-in) (info, published 2 Nov 2026) - [CVE-2026-102801: Regular Labs Users Anywhere information disclosure via tag attributes](https://junglewise.ai/threats/cve-2026-102801-joomla-extension-regularlabs-com-exposure-of-sensitive) (info, published 2 Nov 2026) - [CVE-2026-100751: Regular Labs Tabs & Accordions Pro stored XSS via URL attributes](https://junglewise.ai/threats/cve-2026-100751-joomla-extension-regularlabs-com-privileged-stored-xss-via-data) (info, published 28 Sep 2026) - [CVE-2026-100750: Regular Labs Modules Anywhere arbitrary parameter injection](https://junglewise.ai/threats/cve-2026-100750-joomla-extension-regularlabs-com-lfi-ssrf-in-modules-anywhere-1) (info, published 28 Sep 2026) - [CVE-2026-88853: Regular Labs Modals Pro stored XSS via event handler](https://junglewise.ai/threats/cve-2026-88853-regular-labs-modals-pro-stored-xss-via-event-handler) (info, CVSS 6.3, published 14 Sep 2026) - [CVE-2026-88852: Regular Labs Snippets stored XSS via url option](https://junglewise.ai/threats/cve-2026-88852-regular-labs-snippets-stored-xss-via-url-option) (info, CVSS 0, published 14 Sep 2026) - [CVE-2026-85196: Regular Labs Articles Anywhere and Users Anywhere reflected XSS](https://junglewise.ai/threats/cve-2026-85196-regular-labs-articles-anywhere-and-users-anywhere-reflected-xss) (info, published 14 Sep 2026) - [CVE-2026-85195: Regular Labs Articles Anywhere stored XSS via link option](https://junglewise.ai/threats/cve-2026-85195-regular-labs-articles-anywhere-stored-xss-via-link-option) (info, published 14 Sep 2026) - [CVE-2026-85192: Regular Labs Conditional Content authenticated remote code execution in Joomla](https://junglewise.ai/threats/cve-2026-85192-regular-labs-conditional-content-authenticated-remote-code) (info, CVSS 7.2, published 14 Sep 2026) - [CVE-2026-85191: Regular Labs Tabs & Accordions stored XSS in rtla-alias option](https://junglewise.ai/threats/cve-2026-85191-regular-labs-tabs-accordions-stored-xss-in-rtla-alias-option) (info, published 14 Sep 2026) - [CVE-2026-85190: Regular Labs Quick Index stored XSS via unescaped class attribute](https://junglewise.ai/threats/cve-2026-85190-regular-labs-quick-index-stored-xss-via-unescaped-class-attribute) (info, published 14 Sep 2026) - [CVE-2026-85189: Regular Labs Modals stored XSS via executable URL schemes](https://junglewise.ai/threats/cve-2026-85189-regular-labs-modals-stored-xss-via-executable-url-schemes) (info, CVSS 5.4, published 14 Sep 2026) - [CVE-2026-85188: Regular Labs Advanced Module Manager database disclosure in Conditions editor](https://junglewise.ai/threats/cve-2026-85188-regular-labs-advanced-module-manager-database-disclosure-in) (info, published 14 Sep 2026) - [CVE-2026-74253: Regular Labs Sourcerer RCE in unverified reflected input](https://junglewise.ai/threats/cve-2026-74253-regular-labs-sourcerer-rce-in-unverified-reflected-input) (info, published 17 Aug 2026) - [CVE-2026-65757: Regular Labs Modules Anywhere improper access control in editor popup](https://junglewise.ai/threats/cve-2026-65757-regular-labs-modules-anywhere-improper-access-control-in-editor) (info, published 23 Jul 2026) - [CVE-2026-65756: Regular Labs Keyboard Shortcuts for Joomla XSS in shortcut configuration](https://junglewise.ai/threats/cve-2026-65756-regular-labs-keyboard-shortcuts-for-joomla-xss-in-shortcut) (info, CVSS 0, published 23 Jul 2026) - [CVE-2026-65755: Regular Labs Joomla extensions information exposure via improper caching](https://junglewise.ai/threats/cve-2026-65755-regular-labs-joomla-extensions-information-exposure-via-improper) (info, published 23 Jul 2026) - [CVE-2026-65754: Regular Labs ReReplacer Pro path traversal in XML include paths](https://junglewise.ai/threats/cve-2026-65754-regular-labs-rereplacer-pro-path-traversal-in-xml-include-paths) (info, published 23 Jul 2026) - [CVE-2026-65713: Regular Labs Modals Pro path traversal in gallery paths](https://junglewise.ai/threats/cve-2026-65713-regular-labs-modals-pro-path-traversal-in-gallery-paths) (info, published 23 Jul 2026) - [CVE-2026-65712: Regular Labs CDN for Joomla Pro path traversal in CDN versioning](https://junglewise.ai/threats/cve-2026-65712-regular-labs-cdn-for-joomla-pro-path-traversal-in-cdn-versioning) (info, published 23 Jul 2026) - [CVE-2026-65431: Regular Labs GeoIP extension for Joomla path traversal in database updates](https://junglewise.ai/threats/cve-2026-65431-regular-labs-geoip-extension-for-joomla-path-traversal-in) (info, published 23 Jul 2026) - [CVE-2026-65430: Regular Labs GeoIP extension for Joomla credential leakage in request URLs](https://junglewise.ai/threats/cve-2026-65430-regular-labs-geoip-extension-for-joomla-credential-leakage-in) (info, CVSS 0, published 23 Jul 2026) - [CVE-2026-64876: Regular Labs GeoIP extension for Joomla improper access control in database updates](https://junglewise.ai/threats/cve-2026-64876-regular-labs-geoip-extension-for-joomla-improper-access-control) (info, CVSS 0, published 23 Jul 2026) - [CVE-2026-64875: Regular Labs GeoIP extension for Joomla GeoIP-rule bypass via IP spoofing](https://junglewise.ai/threats/cve-2026-64875-regular-labs-geoip-extension-for-joomla-geoip-rule-bypass-via-ip) (info, CVSS 0, published 23 Jul 2026) - [CVE-2026-64874: Regular Labs Cache Cleaner Pro credential exposure in request URLs](https://junglewise.ai/threats/cve-2026-64874-regular-labs-cache-cleaner-pro-credential-exposure-in-request) (info, CVSS 0, published 23 Jul 2026) ## Most severe Regular Labs vulnerabilities - [CVE-2026-85192: Regular Labs Conditional Content authenticated remote code execution in Joomla](https://junglewise.ai/threats/cve-2026-85192-regular-labs-conditional-content-authenticated-remote-code) (info, CVSS 7.2, published 14 Sep 2026) - [CVE-2026-88853: Regular Labs Modals Pro stored XSS via event handler](https://junglewise.ai/threats/cve-2026-88853-regular-labs-modals-pro-stored-xss-via-event-handler) (info, CVSS 6.3, published 14 Sep 2026) - [CVE-2026-85189: Regular Labs Modals stored XSS via executable URL schemes](https://junglewise.ai/threats/cve-2026-85189-regular-labs-modals-stored-xss-via-executable-url-schemes) (info, CVSS 5.4, published 14 Sep 2026) - [CVE-2026-88852: Regular Labs Snippets stored XSS via url option](https://junglewise.ai/threats/cve-2026-88852-regular-labs-snippets-stored-xss-via-url-option) (info, CVSS 0, published 14 Sep 2026) - [CVE-2026-65756: Regular Labs Keyboard Shortcuts for Joomla XSS in shortcut configuration](https://junglewise.ai/threats/cve-2026-65756-regular-labs-keyboard-shortcuts-for-joomla-xss-in-shortcut) (info, CVSS 0, published 23 Jul 2026) - [CVE-2026-65430: Regular Labs GeoIP extension for Joomla credential leakage in request URLs](https://junglewise.ai/threats/cve-2026-65430-regular-labs-geoip-extension-for-joomla-credential-leakage-in) (info, CVSS 0, published 23 Jul 2026) - [CVE-2026-64876: Regular Labs GeoIP extension for Joomla improper access control in database updates](https://junglewise.ai/threats/cve-2026-64876-regular-labs-geoip-extension-for-joomla-improper-access-control) (info, CVSS 0, published 23 Jul 2026) - [CVE-2026-64875: Regular Labs GeoIP extension for Joomla GeoIP-rule bypass via IP spoofing](https://junglewise.ai/threats/cve-2026-64875-regular-labs-geoip-extension-for-joomla-geoip-rule-bypass-via-ip) (info, CVSS 0, published 23 Jul 2026) - [CVE-2026-64874: Regular Labs Cache Cleaner Pro credential exposure in request URLs](https://junglewise.ai/threats/cve-2026-64874-regular-labs-cache-cleaner-pro-credential-exposure-in-request) (info, CVSS 0, published 23 Jul 2026) - [CVE-2026-64873: Regular Labs Cache Cleaner Pro SSRF via custom query URLs](https://junglewise.ai/threats/cve-2026-64873-regular-labs-cache-cleaner-pro-ssrf-via-custom-query-urls) (info, CVSS 0, published 23 Jul 2026) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, down 82% on the four before (11). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 1 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 9 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 2 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 2 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Regular Labs technologies - [Regular Labs Articles-Anywhere](https://junglewise.ai/threats/technologies/articles-anywhere): 7 vulnerabilities - [Regular Labs Conditional Content](https://junglewise.ai/threats/technologies/conditional-content): 6 vulnerabilities - [Regular Labs Advanced Module Manager](https://junglewise.ai/threats/technologies/advanced-module-manager): 4 vulnerabilities - [Regular Labs GeoIP](https://junglewise.ai/threats/technologies/geoip): 4 vulnerabilities - [Regular Labs Modules-Anywhere](https://junglewise.ai/threats/technologies/modules-anywhere): 4 vulnerabilities - [Regular Labs Rereplacer-Pro](https://junglewise.ai/threats/technologies/rereplacer-pro): 4 vulnerabilities - [Regular Labs Sourcerer](https://junglewise.ai/threats/technologies/sourcerer): 4 vulnerabilities - [Regular Labs Users-Anywhere](https://junglewise.ai/threats/technologies/users-anywhere): 4 vulnerabilities - [Regular Labs Cache Cleaner Pro](https://junglewise.ai/threats/technologies/cache-cleaner-pro): 3 vulnerabilities - [Regular Labs Content Templater Pro](https://junglewise.ai/threats/technologies/content-templater-pro): 3 vulnerabilities - [Regular Labs ReReplacer](https://junglewise.ai/threats/technologies/rereplacer): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Regular Labs vulnerabilities", https://junglewise.ai/threats/vendors/regular-labs, 10 November 2026.