VYPR

IP Login extension

by RegularLabs

CVEs (2)

  • CVE-2026-64797Jul 22, 2026
    risk 0.00cvss epss 0.00

    Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension - IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. Attackers could spoof the IP used for automatic login and potentially impersonate mapped accounts.

  • CVE-2026-64798Jul 22, 2026
    risk 0.00cvss epss 0.00

    Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy.