CVE-2026-63684

Name of the Vulnerable Software and Affected Versions Regular Labs extension (affected versions not specified)

Description Administrator actions, editor popups, and import/export requests lack consistent token, item-permission, and input-validation checks. This allows unauthorized backend users or Cross-Site Request Forgery (CSRF) attacks—a technique where a malicious site tricks a user's browser into performing an unwanted action on a different site—to expose, create, or modify extension configuration and items.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.