Vulnerability in Regularlabs.com Ip Login Extension For Joomla
CVE-2026-64797
IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. Attackers could spoof the IP used for automatic login and potentially impersonate mapped accounts.
Affected products
- Regularlabs.com Ip Login Extension For Joomla — versions 1.0.0-6.2.5
Weakness classification (CWE)
References
- security@joomla.org (product)