Regularlabs.com Users Anywhere Pro Extension For Joomla vulnerabilities

3 CVEs affecting Regularlabs.com Users Anywhere Pro Extension For Joomla, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-85196, published 2026-09-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-85196, published 2026-09-14. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20.0.0, Users Anywhere extension for Joomla < 2.1.0 - Articles Anywhere Pro and Users Anywhere Pro…
CVE-2026-64799, published 2026-07-23. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network…
CVE-2026-64795, published 2026-07-22. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip…