Downloads

Added

• PRO Adds trusted component and module source settings for JavaScript Events
• PRO Adds trusted component and module source settings for raw values from [input:...] Data Tags
• Adds Process Tags security controls for articles, components and other areas in Free and Pro

Changed

• BC BREAK PRO Restricts JavaScript Events in tag separators and empty output to configured trusted sources by default
• Migrates the previous area, tag-removal and Sourcerer settings to the new Process Tags settings
• Updates translations: tr-TR

Fixed

• PRO Fixes invalid user sorting directions being accepted
• PRO Fixes layout options loading PHP files outside Joomla layout folders
• PRO Fixes pagination links not preserving existing URL parameters correctly
• PRO Fixes untrusted request input being inserted into scripts and HTML event attributes
• Fixes profile and contact website links accepting unsupported URL types
• Fixes Smart Search indexing raw Users Anywhere tags instead of rendered content

Added

• SECURITY FIX PRO Escapes request input and limits optional raw output to selected article author groups (CVE-2026-85196)

Removed

• PRO Removes the automatic Download Key popup (inline field remains available)

Fixed

• PRO Fixes page selection in editor custom-field text output
• PRO Fixes resizing images from media custom fields
• PRO Fixes some redirected URLs failing to load
• FREE Keeps Pro-only named nested user tags inert instead of rendering them as the outer user
• FREE Prevents Pro-only contact images and contact forms from rendering in the Free edition
• Fixes calculations skipping numeric values in lists
• Fixes combined paragraph and text limits selecting the wrong content
• Fixes encoded text becoming HTML when limiting rich text
• Fixes filters and ordering on profile data
• Fixes filters using dashed Joomla user-field names, empty values, or relative date values
• Fixes ignore tags not preserving their contents
• Fixes text ranges selecting the wrong words, letters or characters and losing spacing around HTML tags
• Fixes the [number] data-tag alias not rendering
• Fixes unsupported filters selecting an unrelated user instead of producing no result

Fixed

• FREE Fixes untranslated Pagination Summary description in the administrator settings
• Removes obsolete package files left behind by older extension versions during updates

Fixed

• Fixes administrator controls failing when jQuery is unavailable

Changed

• Limits creation of the shared Regular Labs installation lock file to extension installations

Fixed

• PRO Fixes Download Key prompts and fields not matching administrator settings permissions
• Fixes extension being prevented from loading by the shared installation lock file in some cases

Fixed

• Fixes issue with batch updates of multiple Regular Labs extensions failing after the first update

Fixed

• Ensures the required Regular Labs system plugin is enabled after extension installation and updates
• Fixes issue with extension updates timing out or exhausting server workers through third-party update managers and the Joomla CLI
• Fixes issue with package update sources losing their extension link during deduplication
• Fixes issue with the package not being uninstallable
• Fixes issues with Users Anywhere tags used in or generated by Sourcerer losing their rendering context or ignoring system plugin order

Fixed

• Fixes issue with Users Anywhere tags generated by Sourcerer no longer being processed after updating

Changed

• BC BREAK PRO Existing tag-provided field custom HTML now renders as escaped text instead of markup
• Increases minimum php version to 8.2

Fixed

• SECURITY FIX BC BREAK PRO Fixes issue with Users Anywhere external image downloads accepting unsafe hosts, redirects, image responses, or local download folders (CVE-2026-64799)
• SECURITY FIX BC BREAK PRO Fixes issue with Users Anywhere tag-provided field custom HTML overrides being able to render unsafe markup (CVE-2026-64795)
• SECURITY FIX Fixes issue with Regular Labs privileged AJAX endpoints not consistently enforcing valid tokens, matching permissions, and trusted form configuration (CVE-2026-63265)
• SECURITY FIX Fixes issue with Users Anywhere date-sensitive query caches not using bounded time buckets (CVE-2026-65755)
• SECURITY FIX BC BREAK Prevents Users Anywhere tags from exposing authentication data or restricted contact details (CVE-2026-64794)
• SECURITY FIX Updates bundled HTTP message dependency to fix request start-line injection (CVE-2026-55766)
• PRO Fixes issue with configured retina image density being ignored
• PRO Fixes issue with Disable in Sourcerer allowing generated user tags to be processed during final page output
• PRO Fixes issue with protected tags on disabled components being processed again during final page output
• PRO Fixes issue with single-user tags ignoring all but the first OR filter group
• PRO Fixes issue with Smart Search CLI indexing failing when Users Anywhere renders pagination or Note fields
• PRO Fixes issue with unavailable external databases breaking page output instead of rendering the configured fallback
• PRO Fixes issues with explicit custom-field output options, field groups, and SQL text output returning incorrect or missing values
• PRO Fixes issues with pagination using malformed links and returning unbounded results for out-of-range pages
• PRO Fixes issues with request-input names, previous-page state, and unavailable image dimensions
• Fixes issue with contact city data tags returning the region
• Fixes issue with generated public content missing from Smart Search results
• Fixes issue with older Regular Labs extensions breaking after the shared library is updated
• Fixes issue with PHP 8.4+ nullable deprecation in Users Anywhere database helper
• Fixes issue with Regular Labs Library errors when loading parameters or processing malformed XML, CLI, and other non-web requests
• Fixes issue with Regular Labs Library file cache lifetimes lasting longer than configured
• Fixes issues with access-level, user-group, and safe user-parameter data tags returning errors or incorrect values

Added

• Adds ability to set loading="lazy" on image data tags

Changed

• Improves page load speed in some cases
• Refactors and improves general performance of the Regular Labs Library
• Updates translations: sv-SE, tr-TR

Fixed

• PRO Fixes issue with php error about undefined property $databases in some situations

Fixed

• Fixes issue with php error about argument being null in handleOnContentPrepare on some setups
• Fixes some PHP 8.5 deprecated code

Fixed

• J6 Fixes issue with breaking errors on Joomla 6 beta 2
• Fixes issue with php warning about implicitly marking parameter as nullable on PHP 8.4+

Fixed

• Fixes issue with php error on search

Fixed

• Fixes issue with php error about loadStylesAndScripts getting null

Fixed

• Fixes issue with fatal php error about JFactory

Added

• Adds translations: tr-TR

Changed

• Code cleanup
• Improves support for Joomla 6 by replacing some deprecated code

Fixed

• Fixes issue with filter on name and username not working
• J6 Fixes issue with installation errors

Added

• Adds ability to use ranges in text limits, like paragraphs="2-3" and words="5-10"
• Adds translations: sv-SE

Changed

• J6 Makes it possible to install on Joomla 6

Fixed

• Fixes issue with limiting by characters getting an offset
• Fixes issue with some php deprecated warnings on PHP 8.4+

Added

• First stable release