Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Careers
Contact
Book a demo

Get Started

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in Start free

Home
Vendors
Fabrikarcom
Fabrik Extension For Joomla

fabrikar.com Fabrik extension for Joomla Vulnerabilities: CVEs, CISA KEV & Security Advisories

19 CVEs

FC

fabrikar.com Fabrik extension for Joomla Vulnerabilities

CVE security advisories and vulnerability history for Fabrik extension for Joomla by fabrikar.com.

19

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.7

Avg CVSS

2026–2026

Last updated August 22, 2026

Overview

fabrikar.com Fabrik extension for Joomla has 19 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting fabrikar.com Fabrik extension for Joomla, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of fabrikar.com Fabrik extension for Joomla's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical9

High5

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of fabrikar.com Fabrik extension for Joomla's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No fabrikar.com Fabrik extension for Joomla CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every fabrikar.com Fabrik extension for Joomla version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

>= 1.0.0-4.7.118 CVEs
>= 1.0.0-4.6.71 CVE

Find a version

19 CVEs

Sort

Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2
CVE-2026-76606CWE-22
Critical · CVSS 10.0
EPSS 0.3% (26th pct)2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2
CVE-2026-77027CWE-79
High · CVSS 8.6
EPSS 0.3% (17th pct)2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2
CVE-2026-76602CWE-89
Critical · CVSS 9.3
EPSS 0.2% (16th pct)2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2
CVE-2026-76603CWE-284
Medium · CVSS 6.9
EPSS 0.2% (15th pct)2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2
CVE-2026-76571CWE-89
Critical · CVSS 9.3
EPSS 0.3% (19th pct)2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2
CVE-2026-76597CWE-284
High · CVSS 8.7
EPSS 0.4% (28th pct)2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2
CVE-2026-76598CWE-284
High · CVSS 8.7
EPSS 0.3% (23th pct)2026-08-22
Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2
CVE-2026-76605CWE-94
Critical · CVSS 10.0
EPSS 0.4% (34th pct)2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2
CVE-2026-76596CWE-284
High · CVSS 8.7
EPSS 0.2% (15th pct)2026-08-22
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2
CVE-2026-77992CWE-94
Critical · CVSS 9.5
EPSS 0.3% (18th pct)2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2
CVE-2026-76600CWE-284
Medium · CVSS 6.9
EPSS 0.2% (15th pct)2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2
CVE-2026-76604CWE-94
Critical · CVSS 10.0
EPSS 0.4% (34th pct)2026-08-22
Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2
CVE-2026-76607CWE-284
Critical · CVSS 10.0
EPSS 0.2% (15th pct)2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2
CVE-2026-76609CWE-284
Medium · CVSS 6.9
EPSS 0.2% (15th pct)2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2
CVE-2026-76608CWE-284
Medium · CVSS 6.9
EPSS 0.3% (22th pct)2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2
CVE-2026-76599CWE-284
High · CVSS 8.7
EPSS 0.3% (22th pct)2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2
CVE-2026-76601CWE-284
Medium · CVSS 6.9
EPSS 0.3% (22th pct)2026-08-22
Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8
CVE-2026-67282CWE-94
Critical · CVSS 10.0
EPSS 0.6% (45th pct)2026-08-12
Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.7.2
CVE-2026-66915CWE-94
Critical · CVSS 10.0
EPSS 0.6% (47th pct)2026-08-10

Common weakness types

The CWE weakness categories most often found in fabrikar.com Fabrik extension for Joomla CVEs. Follow any weakness for its full explanation.

CWE-284Improper Access Control10 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')5 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVE
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVE

Other fabrikar.com products

Browse vulnerabilities for other products by fabrikar.com.

All fabrikar.com vulnerabilities

Frequently asked questions

Common questions about fabrikar.com Fabrik extension for Joomla vulnerabilities.

How many CVEs does fabrikar.com Fabrik extension for Joomla have?: fabrikar.com Fabrik extension for Joomla has 19 published CVE records since 2026.
How many fabrikar.com Fabrik extension for Joomla CVEs are in CISA KEV?: None of fabrikar.com Fabrik extension for Joomla's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for fabrikar.com Fabrik extension for Joomla vulnerabilities?: No fabrikar.com Fabrik extension for Joomla CVEs currently have a tracked public exploit in this dataset.
Which versions of fabrikar.com Fabrik extension for Joomla are affected?: 2 distinct fabrikar.com Fabrik extension for Joomla versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in fabrikar.com Fabrik extension for Joomla CVEs?: fabrikar.com Fabrik extension for Joomla's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
How many critical fabrikar.com Fabrik extension for Joomla vulnerabilities are there?: fabrikar.com Fabrik extension for Joomla has 9 critical and 5 high-severity CVEs.
What is the average severity of fabrikar.com Fabrik extension for Joomla CVEs?: The average CVSS base score across fabrikar.com Fabrik extension for Joomla's scored CVEs is 8.7.

References

All fabrikar.com vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track fabrikar.com Fabrik extension for Joomla vulnerabilities

Monitor new fabrikar.com Fabrik extension for Joomla vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Other products
FAQ
References