CVE-2026-65754

CVE-2026-65754: Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension

Vendor Regularlabs.com

Product ReReplacer PRo extension for Joomla

Weakness CWE-22 · Path traversal

Published July 23, 2026

Last update July 23, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension - ReReplacer XML include paths could read files outside the site directory.

Key dates

02Disclosure timeline

July 23, 2026 CVE published

July 23, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-65754 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html AskarLabs — CWE-22 write-up Path Traversal

Related vulnerabilities

04Related CVE

CVE-2026-48944 Joomla Extension - getk2.org - Exposure of sensitive files via attachment copy in K2 extension for Joomla < 2.26 CVE-2026-39489 WordPress Download Monitor plugin <= 5.1.9 - Non-Arbitrary File Download vulnerability CVE-2016-20076 WordPress Simple-Backup 2.7.11 Arbitrary File Deletion and Download CVE-2026-57389 WordPress Groundhogg plugin <= 4.4.1 - Arbitrary File Deletion vulnerability CVE-2026-57815 WordPress Forminator plugin <= 1.55.0.2 - Arbitrary File Download vulnerability