PT-2026-79573 · WordPress · Fabrik

CVE-2026-76597

Published

2026-08-22

Updated

2026-08-24

CVSS v4.0

8.7

High

Vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Fabrik versions prior to 4.7.2

Description The list email plugin controller allows an unauthenticated user to upload non-executable files directly to the web root.

Recommendations Update to version 4.7.2 or later.

Fix

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-76597

Fabrik