IP Login extension for Joomla vulnerabilities

3 known vulnerabilities in IP Login extension for Joomla from Regularlabs.com. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  IP Login extension for Joomla: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2026-64798Jul 22, 2026Regularlabs.com

  Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy.

• 7.5 High severity

  IP Login extension for Joomla: Authentication Bypass by Spoofing

  CVE-2026-64797Jul 22, 2026Regularlabs.com

  Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension - IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. Attackers could spoof the IP used for automatic login and potentially impersonate

• 8.0 High severity

  Advanced Module Manager extension for Joomla: Improper Access Control

  CVE-2026-63265Jul 22, 2026Regularlabs.com

  Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions