Page 6

In focus

Pause the movement

1SecuritySeverity unknown
TYPO3-EXT-SA-2026-027: SQL Injection in extension "Forms Export" (frp_form_answers)
It has been discovered that the extension "Forms Export" (frp_form_answers) is vulnerable to SQL Injection.
TYPO3 Security Advisories 25.08.2026
2SecuritySeverity unknown
TYPO3-EXT-SA-2026-026: Broken Access Control in extension "Events 2" (events2)
It has been discovered that the extension "Events 2" (events2) is susceptible to two instances of Broken Access Control.
TYPO3 Security Advisories 25.08.2026
3SecuritySeverity unknown
TYPO3-EXT-SA-2026-025: Multiple Vulnerabilities in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
It has been discovered that the extension "Apache Solr for TYPO3 - Enterprise Search" (solr) is vulnerable to Broken Access Control, Insecure Deserialization and Information Disclosure.
TYPO3 Security Advisories 25.08.2026
4SecuritySeverity unknown
TYPO3-EXT-SA-2026-024: Multiple vulnerabilities in extension "femanager" (femanager)
It has been discovered that the extension "femanager" (femanager) is vulnerable to Broken Access Control and Information Disclosure.
TYPO3 Security Advisories 25.08.2026
5SecuritySeverity unknown
TYPO3-EXT-SA-2026-023: Multiple vulnerabilities in extension "Event management and registration" (sf_event_mgt)
It has been discovered that the extension "Event management and registration" (sf_event_mgt) is vulnerable to Broken Access Control and Server-Side Template Injection (SSTI).
TYPO3 Security Advisories 25.08.2026
6SecuritySeverity unknown
TYPO3-EXT-SA-2026-022: Server-Side Template Injection (SSTI) in extension "powermail" (powermail)
It has been discovered that the extension "powermail" (powermail) is vulnerable to Server-Side Template Injection (SSTI).
TYPO3 Security Advisories 25.08.2026
1SecuritySeverity unknown
TYPO3-EXT-SA-2026-027: SQL Injection in extension "Forms Export" (frp_form_answers)
It has been discovered that the extension "Forms Export" (frp_form_answers) is vulnerable to SQL Injection.
TYPO3 Security Advisories 25.08.2026
2SecuritySeverity unknown
TYPO3-EXT-SA-2026-026: Broken Access Control in extension "Events 2" (events2)
It has been discovered that the extension "Events 2" (events2) is susceptible to two instances of Broken Access Control.
TYPO3 Security Advisories 25.08.2026
3SecuritySeverity unknown
TYPO3-EXT-SA-2026-025: Multiple Vulnerabilities in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
It has been discovered that the extension "Apache Solr for TYPO3 - Enterprise Search" (solr) is vulnerable to Broken Access Control, Insecure Deserialization and Information Disclosure.
TYPO3 Security Advisories 25.08.2026
4SecuritySeverity unknown
TYPO3-EXT-SA-2026-024: Multiple vulnerabilities in extension "femanager" (femanager)
It has been discovered that the extension "femanager" (femanager) is vulnerable to Broken Access Control and Information Disclosure.
TYPO3 Security Advisories 25.08.2026
5SecuritySeverity unknown
TYPO3-EXT-SA-2026-023: Multiple vulnerabilities in extension "Event management and registration" (sf_event_mgt)
It has been discovered that the extension "Event management and registration" (sf_event_mgt) is vulnerable to Broken Access Control and Server-Side Template Injection (SSTI).
TYPO3 Security Advisories 25.08.2026
6SecuritySeverity unknown
TYPO3-EXT-SA-2026-022: Server-Side Template Injection (SSTI) in extension "powermail" (powermail)
It has been discovered that the extension "powermail" (powermail) is vulnerable to Server-Side Template Injection (SSTI).
TYPO3 Security Advisories 25.08.2026

Extension
Myra Cloud Connector 4.0.0 (myra_cloud_connector)
Clear-Cache for Myra Cloud systems
TER Extension Releases 11.08.2026 4.0.0myra_cloud_connector
Official
TYPO3 14.3.6 and 13.4.34 security releases published
AI summary
Versions 14.3.6 and 13.4.34 of the TYPO3 Enterprise Content Management System have been released, addressing security updates.
TYPO3 News 11.08.2026
SecuritySeverity unknown
TYPO3-CORE-SA-2026-021: Broken Access Control in Backend and Install Tool
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3 Security Advisories 11.08.2026 TYPO3-CORE-SA-2026-021
Extension
VidPly - Universal, Accessible Video & Audio Player 1.2.25 (mpc_vidply)
Universal, Accessible Video & Audio Player for TYPO3. Includes support for HTML5 video/audio, YouTube, Vimeo, SoundCloud, HLS and DASH streaming, playlists, captions, transcripts, sign language, and
TER Extension Releases 11.08.2026 1.2.25mpc_vidply
Extension
Frontend for ext:sf_event_mgt 4.0.0 (md_eventmgt_frontend)
Create and edit events for ext:sf_event_mgt in the frontend
TER Extension Releases 11.08.2026 4.0.0md_eventmgt_frontend
Core release
TYPO3 14.3.6 released (security release)
TYPO3 14.3.6 is available. Release type: security.
TYPO3 Core Releases 11.08.2026 14.3.6
Core release
TYPO3 13.4.34 released (security release)
TYPO3 13.4.34 is available. Release type: security.
TYPO3 Core Releases 11.08.2026 13.4.34
Extension
AI Suite MCP 0.7.0 (ai_suite_mcp)
MCP (Model Context Protocol) server integration for TYPO3 and compatibility to EXT:ai_suite. Provides AI-powered tools for Claude Desktop, Claude.ai, ChatGPT, and other MCP clients.
TER Extension Releases 10.08.2026 0.7.0ai_suite_mcp
Extension
Data seeder 0.4.4 (data_seeder)
This extension provides a command, that allows seeding data from YAML files into a TYPO3 database.
TER Extension Releases 10.08.2026 0.4.4data_seeder
Extension
AI Suite 14.4.1 (ai_suite)
AI Suite brings powerful, GDPR-compliant AI directly into the TYPO3 backend. Generate and manage image and page metadata, translate content (including "Easy Language"), create and refine copy, and
TER Extension Releases 10.08.2026 14.4.1ai_suite
Extension
AI Cowriter 3.6.1 (t3_cowriter)
With the help of AI you can now work on a page together with a cowriter - a digital assistant that helps you to write your content.
TER Extension Releases 10.08.2026 3.6.1t3_cowriter
Extension
Dynamic form recipient 5.0.2 (form_dynamic_recipient)
Adds new form select type, which shows recipient records of a given page. This information can be used as dynamic recipient for the form data.
TER Extension Releases 10.08.2026 5.0.2form_dynamic_recipient
Extension
sgalinski Cookie Consent 8.1.3 (sg_cookie_optin)
Elevate your TYPO3 website with our premier Cookie Consent Solution, placing consent at the forefront! Our highly customizable solution not only offers essential tag manager options, but seamlessly
TER Extension Releases 10.08.2026 8.1.3sg_cookie_optin
Extension
[AASHRO] Good Food TYPO3 Template 3.0.0 (at_goodfood)
Good Food is a modern and responsive TYPO3 template designed for restaurants, cafés, food blogs, and catering businesses. It features a clean and elegant design, easy customization, and SEO-friendly
TER Extension Releases 10.08.2026 3.0.0at_goodfood
Extension
Phone Number: Formatting ViewHelper 1.0.1 (phone_number)
Fluid ViewHelper for formatting phone numbers using libphonenumber.
TER Extension Releases 10.08.2026 1.0.1phone_number
Extension
SkynetAccessibility Video Title 14.0.0 (skynetaccessibilityvideotitle)
SkynetAccessibility Video Title
TER Extension Releases 10.08.2026 14.0.0skynetaccessibilityvideotitle
Extension
Vault - Secure Secrets Management 0.15.0 (nr_vault)
Centralized, secure storage for API keys, credentials, and other secrets with envelope encryption, access control, audit logging, and a secure HTTP client.
TER Extension Releases 10.08.2026 0.15.0nr_vault
Extension
Flux: Fluid Integration 12.0.1 (flux)
Drop-in page and content templates with nested content feature. Provides multiple condensed integration APIs to use advanced TYPO3 features with little effort.
TER Extension Releases 10.08.2026 12.0.1flux
Extension
Pagetree Facets 0.2.0 (typo3_pagetree_facets)
Filterable page tree with an extensible filter tab API, built on the TYPO3 v14 BeforePageTreeIsFilteredEvent.
TER Extension Releases 10.08.2026 0.2.0typo3_pagetree_facets
Extension
ALTCHA spam protection for ext:form 2.0.2 (altcha)
TYPO3 form element for spam protection with ALTCHA Widget v3.
TER Extension Releases 10.08.2026 2.0.2altcha
Extension
TYPO3 CMS Visual Editor 1.10.0 (visual_editor)
Brings a modern WYSIWYG editing experience to TYPO3 CMS.
TER Extension Releases 10.08.2026 1.10.0visual_editor
Extension
WS Slider - Universal slider extension 14.4.1 (ws_slider)
Universal slider carousel for Swiper, bootstrap slider, tinyslider, flexslider, ...
TER Extension Releases 10.08.2026 14.4.1ws_slider
Extension
bookingtime appointments 14.1.0 (bt_appointment)
Conveniently integrate bookingtime's online appointment booking into your website.
TER Extension Releases 10.08.2026 14.1.0bt_appointment
Extension
OpenID Connect Authentication 5.0.0 (oidc)
This extension uses OpenID Connect to authenticate users.
TER Extension Releases 10.08.2026 5.0.0oidc
Extension
in2publish Core 14.0.4 (in2publish_core)
Content publishing extension to connect stage and production server
TER Extension Releases 10.08.2026 14.0.4in2publish_core
Extension
Tonictypes - Rapid TCA & Advanced Plugins 2.1.0 (tonictypes)
Maximize development speed with tonictypes, the evolution of the proven typotonic extension (over 1,000 downloads). Build on a foundation of success and create custom TCA records like news, jobs, or
TER Extension Releases 10.08.2026 2.1.0tonictypes
Extension
Plays Games Widget 1.0.1 (plays_games_widget)
TikTok-style infinite swipe feed of HTML5 games for TYPO3. Engage visitors with thousands of instantly playable games.
TER Extension Releases 10.08.2026 1.0.1plays_games_widget
Official
New Community Support Contact for Code of Conduct Incidents
AI summary
Starting September 1, 2026, TYPO3 community members will have the option to seek confidential support for Code of Conduct incidents from either the Ombudsperson Committee or a new independent service provided by Inmedio.
TYPO3 News 10.08.2026
Extension
OAuth Services for TYPO3 14.3.1 (oauth_service)
Central OAuth2 client and token management for TYPO3 — Authorization Code Flow with PKCE, encrypted token storage, automatic refresh and expiry monitoring
TER Extension Releases 09.08.2026 14.3.1oauth_service
Extension
Interamt Connector 3.1.0 (interamt_connect)
Creates an overview of all job advertisements of a public authority, which are listed in the public service job portal INTERAMT.de.
TER Extension Releases 09.08.2026 3.1.0interamt_connect

Security advisories, releases and news from the TYPO3 ecosystem

In focus