CVE-2026-64793: Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions

Published Jul 22, 2026
·
Updated

Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions - Content tags could use ignore flags or property overrides to render restricted or unpublished articles or modules. A content author could thereby expose content to visitors who lacked the required access.

Affected Software

2 affected components
Regular Labs Articles Anywhere
Regular Labs Modules Anywhere

Event History

Jul 22, 2026
CVE Published
via MITRE·08:45 PM
Data Sourced
via MITRE·08:45 PM
DescriptionWeakness
Data Sourced
via NVD·09:18 PM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-64793?

CVE-2026-64793 is rated with a risk score of 40, indicating a significant security vulnerability.

2

How do I fix CVE-2026-64793?

To address CVE-2026-64793, update the Regular Labs Articles Anywhere and Modules Anywhere extensions to their latest versions that incorporate security patches.

3

What impact does CVE-2026-64793 have on Joomla-based websites?

CVE-2026-64793 allows unauthorized access to restricted or unpublished articles and modules, potentially exposing sensitive content.

4

Who is affected by CVE-2026-64793?

Joomla users that have installed the Regular Labs Articles Anywhere and Modules Anywhere extensions are affected by CVE-2026-64793.

5

Is there a workaround for CVE-2026-64793?

A temporary workaround for CVE-2026-64793 involves disabling the use of content tags that may allow unauthorized display of articles or modules.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203