How many CVEs does fabrikar.com have?

fabrikar.com has 19 published CVE records since 2026, including 19 in the last two years.

How many fabrikar.com CVEs are in CISA KEV?

None of fabrikar.com's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which fabrikar.com products have the most CVEs?

The fabrikar.com products with the most published CVEs are Fabrik extension for Joomla.

What are the most common weakness types in fabrikar.com CVEs?

fabrikar.com's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

Are there public exploits for fabrikar.com vulnerabilities?

No fabrikar.com CVEs currently have a tracked public exploit in this dataset.

How many critical fabrikar.com vulnerabilities are there?

fabrikar.com has 9 critical and 5 high-severity CVEs.

What is the average severity of fabrikar.com CVEs?

The average CVSS base score across fabrikar.com's scored CVEs is 8.7.

RadicalNotion.AI

Log in Start free

19 CVEs

fabrikar.com Vulnerabilities

Name: fabrikar.com vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for fabrikar.com.

19

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.7

Avg CVSS

2026–2026

Overview

fabrikar.com has 19 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting fabrikar.com products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on fabrikar.com's vulnerability posture, as a share of its 19 published CVEs.

Average CVSS: 8.7
Critical / high: 74%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 0%

Severity and exploitation

How the CVSS severity of fabrikar.com's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical9

High5

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of fabrikar.com's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No fabrikar.com CVEs currently have a tracked public exploit.

Most affected products

The fabrikar.com products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Fabrik extension for Joomla19 CVEs

Common weakness types

The CWE weakness categories most often found in fabrikar.com CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish fabrikar.com CVE records.

Joomla19 CVEs

Latest fabrikar.com CVEs

The most recently disclosed vulnerabilities affecting fabrikar.com.

Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2
CWE-22
Critical · CVSS 10.0
EPSS 0.3%2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2
CWE-79
High · CVSS 8.6
EPSS 0.3%2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2
CWE-89
Critical · CVSS 9.3
EPSS 0.2%2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2
CWE-284
Medium · CVSS 6.9
EPSS 0.2%2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2
CWE-89
Critical · CVSS 9.3
EPSS 0.3%2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2
CWE-284
High · CVSS 8.7
EPSS 0.4%2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2
CWE-284
High · CVSS 8.7
EPSS 0.3%2026-08-22
Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2
CWE-94
Critical · CVSS 10.0
EPSS 0.4%2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2
CWE-284
High · CVSS 8.7
EPSS 0.2%2026-08-22
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2
CWE-94
Critical · CVSS 9.5
EPSS 0.3%2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2
CWE-284
Medium · CVSS 6.9
EPSS 0.2%2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2
CWE-94
Critical · CVSS 10.0
EPSS 0.4%2026-08-22

Track new fabrikar.com CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor fabrikar.com CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft36,673 CVEs linux22,774 CVEs Google16,481 CVEs Apple15,095 CVEs Oracle12,708 CVEs Debian10,226 CVEs IBM8,839 CVEs Red Hat8,111 CVEs

Browse all vendors

Frequently asked questions

Common questions about fabrikar.com vulnerabilities.

How many CVEs does fabrikar.com have?: fabrikar.com has 19 published CVE records since 2026, including 19 in the last two years.
How many fabrikar.com CVEs are in CISA KEV?: None of fabrikar.com's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which fabrikar.com products have the most CVEs?: The fabrikar.com products with the most published CVEs are Fabrik extension for Joomla.
What are the most common weakness types in fabrikar.com CVEs?: fabrikar.com's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
Are there public exploits for fabrikar.com vulnerabilities?: No fabrikar.com CVEs currently have a tracked public exploit in this dataset.
How many critical fabrikar.com vulnerabilities are there?: fabrikar.com has 9 critical and 5 high-severity CVEs.
What is the average severity of fabrikar.com CVEs?: The average CVSS base score across fabrikar.com's scored CVEs is 8.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track fabrikar.com vulnerabilities

Monitor new fabrikar.com vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing