CSRF in Regularlabs.com Advanced Module Manager Extension For Joomla

CVE-2026-63265

Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke l…

Affected products

Regularlabs.com Advanced Module Manager Extension For Joomla — versions 1.0.0-11.0.1
Regularlabs.com Articles Anywhere Extension For Joomla — versions 1.0.0-18.0.2
Regularlabs.com Articles Field Extension For Joomla — versions 1.0.0-4.7.1
Regularlabs.com Better Frontend Link Extension For Joomla — versions 1.0.0-2.2.5
Regularlabs.com Cache Cleaner Extension For Joomla — versions 1.0.0-9.7.6
Regularlabs.com Cdn For Joomla Extension — versions 1.0.0-7.3.7
Regularlabs.com Conditional Content Extension For Joomla — versions 1.0.0-6.0.0
Regularlabs.com Content Templater Extension For Joomla — versions 1.0.0-13.0.0
Regularlabs.com Db Replacer Extension For Joomla — versions 1.0.0-8.2.7
Regularlabs.com Email Protector Extension For Joomla — versions 1.0.0-6.3.7

Weakness classification (CWE)

References

security@joomla.org (product)