Known Vulnerabilities for Fabrik Extension For Joomla by Fabrikar.com
Listed below are 10 of the newest known vulnerabilities associated with "Fabrik Extension For Joomla" by "Fabrikar.com".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-77992 json | Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 - The onUpdateComment end... | Not Provided | 2026-08-22 | 2026-08-24 |
| CVE-2026-77027 json | Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of user supplied input in the j... | Not Provided | 2026-08-22 | 2026-08-24 |
| CVE-2026-76609 json | Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 - The onUpdateComment endpoin... | Not Provided | 2026-08-22 | 2026-08-24 |
| CVE-2026-76608 json | Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2 - The onGetEm... | Not Provided | 2026-08-22 | 2026-08-24 |
| CVE-2026-76607 json | Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2. | Not Provided | 2026-08-22 | 2026-08-24 |
| CVE-2026-76606 json | Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2. | Not Provided | 2026-08-22 | 2026-08-24 |
| CVE-2026-76605 json | Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2. | Not Provided | 2026-08-22 | 2026-08-24 |
| CVE-2026-76604 json | Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2 - The PHP form... | Not Provided | 2026-08-22 | 2026-08-24 |
| CVE-2026-76603 json | Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2 - The inineedit form c... | Not Provided | 2026-08-22 | 2026-08-25 |
| CVE-2026-76602 json | Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2 - The order parameter in list m... | Not Provided | 2026-08-22 | 2026-08-24 |