CVE-2026-63685
Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially causing major data corruption or site compromise.
| CWE | CWE-284 |
| Vendor | regularlabs.com |
| Product | db replacer extension for joomla |
| Published | Jul 22, 2026 |
Stay Ahead of the Next One
Get instant alerts for regularlabs.com db replacer extension for joomla
Be the first to know when new unknown vulnerabilities affecting regularlabs.com db replacer extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
regularlabs.com / DB Replacer extension for Joomla
1.0.0-8.2.7