fabrikar.com vulnerabilities

Newest CVEs

• CVE-2026-76606

  Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2

  fabrikar.com · Fabrik extension for Joomla

  Critical10.0
• CVE-2026-77027

  Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2

  fabrikar.com · Fabrik extension for Joomla

  High8.6
• CVE-2026-76602

  Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2

  fabrikar.com · Fabrik extension for Joomla

  Critical9.3
• CVE-2026-76603

  Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2

  fabrikar.com · Fabrik extension for Joomla

  Medium6.9
• CVE-2026-76571

  Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2

  fabrikar.com · Fabrik extension for Joomla

  Critical9.3
• CVE-2026-76597

  Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2

  fabrikar.com · Fabrik extension for Joomla

  High8.7
• CVE-2026-76598

  Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2

  fabrikar.com · Fabrik extension for Joomla

  High8.7
• CVE-2026-76605

  Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2

  fabrikar.com · Fabrik extension for Joomla

  Critical10.0
• CVE-2026-76596

  Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2

  fabrikar.com · Fabrik extension for Joomla

  High8.7
• CVE-2026-77992

  Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2

  fabrikar.com · Fabrik extension for Joomla

  Critical9.5