CVE-2026-102801
Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla < 3.0.1
Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla < 3.0.1 - An administrator can disable output of user email addresses or usernames in Users Anywhere. In affected code, attributes supplied inside a {user} or [email] / [username] tag can change those plugin settings for that render. For example, [email allow_output_email="1"] can display an email address even when Allow output of email is set to No. This bypasses the personal-data output setting; it does not bypass a separate policy that disallows Users Anywhere tags from the content source altogether.
| CWE | CWE-200 |
| Vendor | regularlabs.com |
| Product | users anywhere (free, pro) extension for joomla |
| Published | Nov 2, 2026 |
Get instant alerts for regularlabs.com users anywhere (free, pro) extension for joomla
Be the first to know when new unknown vulnerabilities affecting regularlabs.com users anywhere (free, pro) extension for joomla are published — delivered to Slack, Telegram or Discord.