CVE-2026-76600

The Fabrikar Joomla extension prior to version 4.7.2 is vulnerable to unauthenticated deletion of any comment due to insufficient access controls in the DeleteComment endpoint. This flaw allows an attacker to remove comments without authentication, potentially disrupting user-generated content and impacting site integrity. Joomla administrators and developers utilizing this extension should prioritize applying the latest updates to mitigate this risk.