CVE-2026-64797

CVE-2026-64797: Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension

Vendor Regularlabs.com

Product IP Login extension for Joomla

Weakness CWE-290

Published July 22, 2026

Last update July 28, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension - IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. Attackers could spoof the IP used for automatic login and potentially impersonate mapped accounts.

Key dates

02Disclosure timeline

July 22, 2026 CVE published

July 28, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-64797 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/290.html AskarLabs — CWE-290 write-up Authentication Bypass by Spoofing

Related vulnerabilities

04Related CVE

CVE-2023-52176 WordPress Malware Scanner plugin <= 4.7.1 - IP Restriction Bypass vulnerability CVE-2023-48271 WordPress Maspik – Spam Blacklist plugin <= 0.10.3 - IP Filtering Bypass vulnerability CVE-2026-63683 Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager CVE-2024-35749 WordPress Under Construction / Maintenance Mode from Acurax plugin <= 2.6 - IP Bypass vulnerability CVE-2023-41134 WordPress Antispam Bee plugin <= 2.11.3 - Country IP Restriction Bypass vulnerability