The ReReplacer PRo extension for Joomla suffers from a CWE-22 directory traversal vulnerability (CVE-2026-65754) that allows XML include paths to read files outside the restricted site directory. This improper limitation of pathname access could enable an attacker to access sensitive files on the server. The affected versions are from 1.0.0 up to and including 15.0.3. There is no CVSS score or vendor advisory indicating a patch or mitigation. No known exploits have been reported.

The vulnerability allows unauthorized reading of files outside the intended site directory, potentially exposing sensitive information stored on the server. The exact impact depends on the files accessible and the server environment, but it does not indicate direct code execution or privilege escalation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the extension and monitor for suspicious activity. Avoid using affected versions in production environments if possible.