Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Fabrik extension for Joomla — Vulnerabilities & Security Advisories 19

All 19 CVE vulnerabilities found in Fabrik extension for Joomla, with AI-generated Chinese analysis, references, and POCs.

This page catalogs known vulnerabilities for the Fabrik extension for Joomla, focusing on common weakness classifications and associated security tags. It aggregates detailed reports regarding flaws such as cross-site scripting, SQL injection, and insecure direct object references that have been identified within this specific component. The database covers incidents discovered and disclosed over the last several years, ensuring a comprehensive view of the product’s security posture as it has evolved through various releases. Here, security researchers and administrators can track a vendor's advisories to stay informed about critical patches and mitigation strategies. Users can also understand a weakness class by reviewing specific instances of how these flaws manifest in the Fabrik environment, providing context on exploitability and impact. Furthermore, the page allows users to look up a product's vulnerability history, offering a timeline of security issues that helps in assessing risk and prioritizing updates for Joomla installations using this extension. This resource serves as a neutral reference point for analyzing the technical details of reported bugs without speculation. By consolidating these data points, the page facilitates better decision-making for system maintainers who need to evaluate the current threat landscape associated with this popular Joomla tool. The information is organized to support efficient review and cross-referencing against other security databases for a holistic understanding of the extension's resilience against common web application attacks.

Vendor: fabrikar.com

CVE ID Title CVSS Severity Published
CVE-2026-76606 Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2 CWE-22 10.0 Critical 2026-08-22
CVE-2026-77027 Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 CWE-79 8.6 High 2026-08-22
CVE-2026-76602 Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2 CWE-89 9.3 Critical 2026-08-22
CVE-2026-76603 Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2 CWE-284 6.9 Medium 2026-08-22
CVE-2026-76571 Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2 CWE-89 9.3 Critical 2026-08-22
CVE-2026-76597 Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2 CWE-284 8.7 High 2026-08-22
CVE-2026-76598 Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2 CWE-284 8.7 High 2026-08-22
CVE-2026-76605 Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2 CWE-94 10.0 Critical 2026-08-22
CVE-2026-76596 Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2 CWE-284 8.7 High 2026-08-22
CVE-2026-77992 Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 CWE-94 9.5 Critical 2026-08-22
CVE-2026-76600 Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2 CWE-284 6.9 Medium 2026-08-22
CVE-2026-76604 Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2 CWE-94 10.0 Critical 2026-08-22
CVE-2026-76607 Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2 CWE-284 10.0 Critical 2026-08-22
CVE-2026-76609 Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 CWE-284 6.9 Medium 2026-08-22
CVE-2026-76608 Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2 CWE-284 6.9 Medium 2026-08-22
CVE-2026-76599 Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2 CWE-284 8.7 High 2026-08-22
CVE-2026-76601 Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2 CWE-284 6.9 Medium 2026-08-22
CVE-2026-67282 Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 CWE-94 10.0 Critical 2026-08-12
CVE-2026-66915 Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.7.2 CWE-94 10.0 Critical 2026-08-10

All 19 known CVE vulnerabilities affecting Fabrik extension for Joomla with full Chinese analysis, references, and POCs where available.