CVE-2026-63280

CVE-2026-63280: Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager

Vendor Regularlabs.com
Product Advanced Module Manager extension for Joomla
Weakness CWE-352 · CSRF
Published July 22, 2026
Last update July 23, 2026
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions.

Key dates

02Disclosure timeline

July 22, 2026 CVE published
July 23, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-9731 Wp Js Detect <= 1.0.9 - Cross-Site Request Forgery to Plugin Settings Update CVE-2026-57785 WordPress ApusListing theme <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-59520 WordPress CrawlWP SEO plugin <= 3.0.16 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-65471 WordPress Avada Core plugin <= 5.15.6 - Cross Site Request Forgery (CSRF) vulnerability CVE-2016-20083 WordPress More Fields Plugin 2.1 Cross-Site Request Forgery