fabrikar.com vulnerabilities
19 published CVEs name fabrikar.com among the affected products.
- 19Published CVEs19 of them scored
- 19Last 12 monthspublished in the last year
- 9Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-76606
Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2
fabrikar.com · Fabrik extension for Joomla
Critical10.0 - CVE-2026-77027
Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2
fabrikar.com · Fabrik extension for Joomla
High8.6 - CVE-2026-76602
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2
fabrikar.com · Fabrik extension for Joomla
Critical9.3 - CVE-2026-76603
Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2
fabrikar.com · Fabrik extension for Joomla
Medium6.9 - CVE-2026-76571
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2
fabrikar.com · Fabrik extension for Joomla
Critical9.3 - CVE-2026-76597
Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2
fabrikar.com · Fabrik extension for Joomla
High8.7 - CVE-2026-76598
Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2
fabrikar.com · Fabrik extension for Joomla
High8.7 - CVE-2026-76605
Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2
fabrikar.com · Fabrik extension for Joomla
Critical10.0 - CVE-2026-76596
Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2
fabrikar.com · Fabrik extension for Joomla
High8.7 - CVE-2026-77992
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2
fabrikar.com · Fabrik extension for Joomla
Critical9.5