Joomla Extensions
6 articles tagged Joomla Extensions, newest first.
Articles Anywhere 20.1.1 and Sourcerer 17.0.1 Fix One Issue Together
CVE-2026-102802 is one Joomla extension fix split across Articles Anywhere 20.1.1 and Sourcerer 17.0.1: update both. Users Anywhere 3.0.1 fixes CVE-2026-102801.
Modules Anywhere 10.0.0 and Tabs & Accordions 3.2.0 Close Two Content Author Security Holes
CVE-2026-100750 and CVE-2026-100751: Regular Labs fixed two High severity issues in Modules Anywhere 10.0.0 and Tabs & Accordions 3.2.0 for Joomla.
Regular Labs Publishes 24 Joomla Extension Updates Including 10 Security Fixes
Regular Labs shipped 24 Joomla extension updates on 13 September 2026. Ten fix security issues across nine CVEs, and four change behaviour on update.
iCagenda 4.0.12 fixes an unauthenticated SQL injection
CVE-2026-67365 is an unauthenticated SQL injection in the iCagenda Calendar module for Joomla, scored 9.2 Critical. Fixed in 4.0.12.
Sourcerer 14 and 15 did not fix CVE-2026-74253. 16.0.0 does.
Sourcerer 14 and 15 were both published as the fix for CVE-2026-74253 and neither closed it. It is exploited in the wild. Update now to 16.0.0.
Regular Labs Patched Its Whole Joomla Extension Catalogue at Once
Regular Labs patched its Joomla extension range on 22 July 2026. The Joomla CNA then published 29 CVEs, four rated 9.8. Every CVE and fixed version.