VYPR

Modules Anywhere

by Joomla

CVEs (3)

  • CVE-2026-100750HigSep 28, 2026
    risk 0.49cvss 7.5epss 0.00

    Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary parameters of the selected module. This feature is enabled by default in affected versions. The…

  • CVE-2026-65757HigJul 23, 2026
    risk 0.00cvss 8.1epss 0.00

    Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens.

  • CVE-2026-64793CriJul 22, 2026
    risk 0.00cvss 9.1epss 0.00

    Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions - Content tags could use ignore flags or property overrides to render restricted or unpublished articles or modules. A content author could thereby…