fabrikar.com Fabrik extension for Joomla

• CVE-2026-76606 Critical 10.0 Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2 0.5%
• CVE-2026-77027 High 8.6 Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 0.4%
• CVE-2026-76602 Critical 9.3 Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2 0.4%
• CVE-2026-76603 Medium 6.9 Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2 0.4%
• CVE-2026-76571 Critical 9.3 Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2 0.4%
• CVE-2026-76597 High 8.7 Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2 0.4%
• CVE-2026-76598 High 8.7 Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2 0.5%
• CVE-2026-76605 Critical 10.0 Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2 0.7%
• CVE-2026-76596 High 8.7 Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2 0.4%
• CVE-2026-77992 Critical 9.5 Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 0.4%
• CVE-2026-76600 Medium 6.9 Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2 0.4%
• CVE-2026-76604 Critical 10.0 Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2 0.7%
• CVE-2026-76607 Critical 10.0 Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2 0.4%
• CVE-2026-76609 Medium 6.9 Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 0.4%
• CVE-2026-76608 Medium 6.9 Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2 0.4%
• CVE-2026-76599 High 8.7 Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2 0.4%
• CVE-2026-76601 Medium 6.9 Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2 0.4%
• CVE-2026-67282 Critical 10.0 Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 0.8%
• CVE-2026-66915 Critical 10.0 Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.7.2 0.8%