CVE-2026-64875

CVE-2026-64875: Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension

Vendor Regularlabs.com

Product GeoIP extension for Joomla

Weakness CWE-290

Published July 23, 2026

Last update July 27, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension - GeoIP lookups trusted spoofable forwarded client-IP headers, this could cause GeoIP-rule bypass.

Key dates

02Disclosure timeline

July 23, 2026 CVE published

July 27, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-64875 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/290.html AskarLabs — CWE-290 write-up Authentication Bypass by Spoofing

Related vulnerabilities

04Related CVE

CVE-2026-65570 WordPress Login with phone number plugin <= 1.8.70 - Bypass vulnerability vulnerability CVE-2024-21746 WordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerability CVE-2026-42662 WordPress Event Tickets plugin <= 5.27.5 - Bypass Vulnerability vulnerability CVE-2025-69401 WordPress WooODT Lite plugin <= 2.5.2 - Payment Bypass Vulnerability vulnerability CVE-2024-32708 WordPress Maintenance Mode plugin <= 3.0.1 - IP Bypass vulnerability