Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Fabrik extension for Joomla — Vulnerabilities & Security Advisories 19

All 19 CVE vulnerabilities found in Fabrik extension for Joomla, with AI-generated Chinese analysis, references, and POCs.

This page catalogs security weaknesses associated with the Fabrik extension for Joomla, specifically focusing on known vulnerabilities and their classification. The collection aggregates data on flaws such as SQL injection, cross-site scripting, and access control errors, covering incident reports from 2012 through the present day. Readers can utilize this resource to track the security posture of this specific vendor extension, analyze common weakness classes affecting Joomla add-ons, or review the complete vulnerability history of Fabrik to identify recurring patterns. By consolidating these records, the page provides a structured view of past issues without requiring users to navigate multiple disparate databases. The entries are organized to facilitate rapid identification of high-risk components and to support security teams in assessing patch requirements or evaluating replacement options. This aggregation serves as a technical reference for developers and administrators managing Joomla environments where Fabrik is deployed, ensuring they are aware of historical exploits that may inform current hardening strategies. The focus remains strictly on technical details and timeline progression, offering a clear audit trail of how security defects have emerged and been addressed over time.

Vendor: fabrikar.com

CVE ID Title CVSS Severity Published
CVE-2026-76606 Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2 CWE-22 10.0 Critical 2026-08-22
CVE-2026-77027 Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 CWE-79 8.6 High 2026-08-22
CVE-2026-76602 Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2 CWE-89 9.3 Critical 2026-08-22
CVE-2026-76603 Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2 CWE-284 6.9 Medium 2026-08-22
CVE-2026-76571 Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2 CWE-89 9.3 Critical 2026-08-22
CVE-2026-76597 Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2 CWE-284 8.7 High 2026-08-22
CVE-2026-76598 Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2 CWE-284 8.7 High 2026-08-22
CVE-2026-76605 Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2 CWE-94 10.0 Critical 2026-08-22
CVE-2026-76596 Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2 CWE-284 8.7 High 2026-08-22
CVE-2026-77992 Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 CWE-94 9.5 Critical 2026-08-22
CVE-2026-76600 Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2 CWE-284 6.9 Medium 2026-08-22
CVE-2026-76604 Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2 CWE-94 10.0 Critical 2026-08-22
CVE-2026-76607 Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2 CWE-284 10.0 Critical 2026-08-22
CVE-2026-76609 Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 CWE-284 6.9 Medium 2026-08-22
CVE-2026-76608 Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2 CWE-284 6.9 Medium 2026-08-22
CVE-2026-76599 Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2 CWE-284 8.7 High 2026-08-22
CVE-2026-76601 Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2 CWE-284 6.9 Medium 2026-08-22
CVE-2026-67282 Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 CWE-94 10.0 Critical 2026-08-12
CVE-2026-66915 Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.7.2 CWE-94 10.0 Critical 2026-08-10

All 19 known CVE vulnerabilities affecting Fabrik extension for Joomla with full Chinese analysis, references, and POCs where available.