Users Anywhere extension for Joomla vulnerabilities

2 known vulnerabilities in Users Anywhere extension for Joomla from Regularlabs.com. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Articles Anywhere extension for Joomla: Use of Cache Containing Sensitive Information

  CVE-2026-65755Jul 23, 2026Regularlabs.com

  Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension - Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or

• 8.0 High severity

  Advanced Module Manager extension for Joomla: Improper Access Control

  CVE-2026-63265Jul 22, 2026Regularlabs.com

  Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions