Advanced Module Manager extension for Joomla vulnerabilities

3 known vulnerabilities in Advanced Module Manager extension for Joomla from Regularlabs.com. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Advanced Module Manager extension for Joomla: Authentication Bypass by Spoofing

  CVE-2026-63683Jul 22, 2026Regularlabs.com

  Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules.

• 8.8 High severity

  Advanced Module Manager extension for Joomla: Improper Access Control

  CVE-2026-63280Jul 22, 2026Regularlabs.com

  Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions.

• 8.0 High severity

  Advanced Module Manager extension for Joomla: Improper Access Control

  CVE-2026-63265Jul 22, 2026Regularlabs.com

  Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions