Joomla! squashes critical privileged account creation holes

Borked two factor authentication also fixed

Joomla! has revealed it's patched twin critical flaws allowing attackers to bypass rules and create elevated privilege accounts."