Vulnerability · Published Jul 23, 2026 · Assigned by Joomla

CVE-2026-65755Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension

High 7.5

In plain English

A high-severity security flaw in Articles Anywhere extension for Joomla from regularlabs.com. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.4%top 63.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension - Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or expiry boundaries, potentially exposing content after it should become unavailable.

Affected products (as reported)

Vendor	Product	Versions
regularlabs.com	Articles Anywhere extension for Joomla	1.0.0-18.0.2
regularlabs.com	Users Anywhere extension for Joomla	1.0.0-1.2.7

Weakness: CWE-524 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

https://regularlabs.com/ product