CVE-2026-63683

CVE-2026-63683: Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager

Vendor Regularlabs.com
Product Advanced Module Manager extension for Joomla
Weakness CWE-290
Published July 22, 2026
Last update July 28, 2026
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules.

Key dates

02Disclosure timeline

July 22, 2026 CVE published
July 28, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-45453 WordPress Maintenance Redirect plugin <= 2.0.1 - IP Bypass vulnerability CVE-2026-24372 WordPress Subscriptions for WooCommerce plugin <= 1.8.10 - Bypass Vulnerability vulnerability CVE-2023-52176 WordPress Malware Scanner plugin <= 4.7.1 - IP Restriction Bypass vulnerability CVE-2026-42662 WordPress Event Tickets plugin <= 5.27.5 - Bypass Vulnerability vulnerability CVE-2025-32227 WordPress Asgaros Forum plugin <= 3.0.0 - File Upload Numbers Bypass vulnerability