Page 2

In focus

Pause the movement

1SecuritySeverity unknown
TYPO3-EXT-SA-2026-027: SQL Injection in extension "Forms Export" (frp_form_answers)
It has been discovered that the extension "Forms Export" (frp_form_answers) is vulnerable to SQL Injection.
TYPO3 Security Advisories 25.08.2026
2SecuritySeverity unknown
TYPO3-EXT-SA-2026-026: Broken Access Control in extension "Events 2" (events2)
It has been discovered that the extension "Events 2" (events2) is susceptible to two instances of Broken Access Control.
TYPO3 Security Advisories 25.08.2026
3SecuritySeverity unknown
TYPO3-EXT-SA-2026-025: Multiple Vulnerabilities in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
It has been discovered that the extension "Apache Solr for TYPO3 - Enterprise Search" (solr) is vulnerable to Broken Access Control, Insecure Deserialization and Information Disclosure.
TYPO3 Security Advisories 25.08.2026
4SecuritySeverity unknown
TYPO3-EXT-SA-2026-024: Multiple vulnerabilities in extension "femanager" (femanager)
It has been discovered that the extension "femanager" (femanager) is vulnerable to Broken Access Control and Information Disclosure.
TYPO3 Security Advisories 25.08.2026
5SecuritySeverity unknown
TYPO3-EXT-SA-2026-023: Multiple vulnerabilities in extension "Event management and registration" (sf_event_mgt)
It has been discovered that the extension "Event management and registration" (sf_event_mgt) is vulnerable to Broken Access Control and Server-Side Template Injection (SSTI).
TYPO3 Security Advisories 25.08.2026
6Official
Content Blocks: Q2/2026 Report and the GUI for TYPO3 v14
AI summary
The Content Blocks GUI now operates on TYPO3 v13 and v14 from a unified codebase, with enhancements made to the JSON Schema, and a team member participated in the TYPO3 Dialogue Days in Düsseldorf.
TYPO3 News 19.08.2026
1SecuritySeverity unknown
TYPO3-EXT-SA-2026-027: SQL Injection in extension "Forms Export" (frp_form_answers)
It has been discovered that the extension "Forms Export" (frp_form_answers) is vulnerable to SQL Injection.
TYPO3 Security Advisories 25.08.2026
2SecuritySeverity unknown
TYPO3-EXT-SA-2026-026: Broken Access Control in extension "Events 2" (events2)
It has been discovered that the extension "Events 2" (events2) is susceptible to two instances of Broken Access Control.
TYPO3 Security Advisories 25.08.2026
3SecuritySeverity unknown
TYPO3-EXT-SA-2026-025: Multiple Vulnerabilities in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
It has been discovered that the extension "Apache Solr for TYPO3 - Enterprise Search" (solr) is vulnerable to Broken Access Control, Insecure Deserialization and Information Disclosure.
TYPO3 Security Advisories 25.08.2026
4SecuritySeverity unknown
TYPO3-EXT-SA-2026-024: Multiple vulnerabilities in extension "femanager" (femanager)
It has been discovered that the extension "femanager" (femanager) is vulnerable to Broken Access Control and Information Disclosure.
TYPO3 Security Advisories 25.08.2026
5SecuritySeverity unknown
TYPO3-EXT-SA-2026-023: Multiple vulnerabilities in extension "Event management and registration" (sf_event_mgt)
It has been discovered that the extension "Event management and registration" (sf_event_mgt) is vulnerable to Broken Access Control and Server-Side Template Injection (SSTI).
TYPO3 Security Advisories 25.08.2026
6Official
Content Blocks: Q2/2026 Report and the GUI for TYPO3 v14
AI summary
The Content Blocks GUI now operates on TYPO3 v13 and v14 from a unified codebase, with enhancements made to the JSON Schema, and a team member participated in the TYPO3 Dialogue Days in Düsseldorf.
TYPO3 News 19.08.2026

In focus — Picked as one of the six most noteworthy entries of the week and shown in the slider at the top.SecuritySeverity unknown
TYPO3-EXT-SA-2026-023: Multiple vulnerabilities in extension "Event management and registration" (sf_event_mgt)
It has been discovered that the extension "Event management and registration" (sf_event_mgt) is vulnerable to Broken Access Control and Server-Side Template Injection (SSTI).
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-023
SecuritySeverity unknown
TYPO3-EXT-SA-2026-022: Server-Side Template Injection (SSTI) in extension "powermail" (powermail)
It has been discovered that the extension "powermail" (powermail) is vulnerable to Server-Side Template Injection (SSTI).
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-022
SecuritySeverity unknown
TYPO3-EXT-SA-2026-021: Broken Access Control in extension "Forum" (pforum)
It has been discovered that the extension "Forum" (pforum) is susceptible to Broken Access Control.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-021
SecuritySeverity unknown
TYPO3-EXT-SA-2026-020: Broken Access Control in extension "Industry Directory" (yellowpages2)
It has been discovered that the extension "Industry Directory" (yellowpages2) is susceptible to Broken Access Control.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-020
SecuritySeverity unknown
TYPO3-EXT-SA-2026-019: Broken Access Control in extension "Club Directory" (clubdirectory)
It has been discovered that the extension "Club Directory" (clubdirectory) is susceptible to Broken Access Control.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-019
SecuritySeverity unknown
TYPO3-EXT-SA-2026-018: Broken Access Control in extension "Telephone Directory" (telephonedirectory)
It has been discovered that the extension "Telephone Directory" (telephonedirectory) is susceptible to Broken Access Control.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-018
SecuritySeverity unknown
TYPO3-EXT-SA-2026-017: Path Traversal in extension "Mask" (mask)
It has been discovered that the extension "Mask" (mask) is vulnerable to Path Traversal.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-017
SecuritySeverity unknown
TYPO3-EXT-SA-2026-016: Information Disclosure in extension "Modules" (modules)
It has been discovered that the extension "Modules" (modules) is vulnerable to Information Disclosure.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-016
SecuritySeverity unknown
TYPO3-EXT-SA-2026-015: Multiple Vulnerabilities in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)
It has been discovered that the extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy) is vulnerable to Insufficient Session Expiration and Cleartext Transmission of Sensitive Information.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-015
SecuritySeverity unknown
TYPO3-EXT-SA-2026-014: Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)
It has been discovered that the extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail) is vulnerable to Remote Code Execution.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-014
Extension
FullCalendar.io for ext:Calendarize 6.0.0 (md_fullcalendar)
This extension brings the FullCalendar.io with switchable views for month, week and day to ext:calendarize. It is also possible to filter calendars by categories.
TER Extension Releases 25.08.2026 6.0.0md_fullcalendar
Extension
Events 2 10.2.12 (events2)
Create single and recurring events
TER Extension Releases 25.08.2026 10.2.12events2
Extension
Forum 6.2.4 (pforum)
Forum
TER Extension Releases 25.08.2026 6.2.4pforum
Extension
Forms Export 7.1.1 (frp_form_answers)
Adds the possibility, as a finisher, to save and export the form entries from customers
TER Extension Releases 25.08.2026 7.1.1frp_form_answers
Extension
sluggi - URL Slug Management 14.15.0 (sluggi)
URL slug management with inline editing, auto-sync, locking, access control, and redirects
TER Extension Releases 25.08.2026 14.15.0sluggi
Extension
Event management and registration 9.0.3 (sf_event_mgt)
Configurable event management and registration extension based on ExtBase and Fluid
TER Extension Releases 25.08.2026 9.0.3sf_event_mgt
Extension
femanager 13.3.5 (femanager)
TYPO3 Frontend User Registration and Management based on Extbase and Fluid and on TYPO3 13 and the possibility to extend it.
TER Extension Releases 25.08.2026 13.3.5femanager
Extension
TYPO3 Modules by coding.ms 8.1.4 (modules)
TYPO3 toolbox for Frontend-User-Registration, Profile, Invitations, Listing with detailview, Addressmanagement, and Frontend-Recordmanagement. User friendly Backendmodule for managing Frontend- and
TER Extension Releases 25.08.2026 8.1.4modules
Official
How to Choose the Right TYPO3 Agency for Your Project
AI summary
Choosing the right TYPO3 agency is crucial for the success of a project, as it heavily influences factors like security, scalability, and long-term stability.
TYPO3 News 25.08.2026
Extension
AWS SDK for PHP 3.393.5 (aws_sdk_php)
Amazon Web Services (AWS) SDK for PHP. See https://aws.amazon.com/sdk-for-php/ for details.
TER Extension Releases 24.08.2026 3.393.5aws_sdk_php
Extension
Mask 9.0.11 (mask)
Create your own content elements and page templates. Easy to use, even without programming skills because of the comfortable drag and drop system. Stored in structured database tables. Style your
TER Extension Releases 24.08.2026 9.0.11mask
Extension
PDF ViewHelpers 4.0.1 (pdfviewhelpers)
Provides various Fluid ViewHelpers to create PDF documents. Under the hood pdfviewhelpers uses TCPDF and FPDI.
TER Extension Releases 24.08.2026 4.0.1pdfviewhelpers
Extension
Jobapplications 5.1.1 (jobapplications)
This extension enables you to manage job postings, provides you with an application form and a backend module to manage incoming applications.
TER Extension Releases 24.08.2026 5.1.1jobapplications
Extension
Fortune Cookie 1.0.1 (sic_fortune)
Displays a random quote or citation of the day from the database or a Unix fortune file.
TER Extension Releases 24.08.2026 1.0.1sic_fortune
Extension
LUX - TYPO3 Marketing Automation 44.1.0 (lux)
Living User Experience - LUX - the Marketing Automation tool for TYPO3. Turn your visitors to leads. Identification and profiling of your visitors within your TYPO3 website.
TER Extension Releases 24.08.2026 44.1.0lux
Extension
File No-Index 1.2.0 (file_noindex)
Exclude single files/images from search engines (Google Image Search) via a dynamically generated robots.txt - toggled per file in the file list.
TER Extension Releases 24.08.2026 1.2.0file_noindex
Extension
Jobapplications 5.1.0 (jobapplications)
This extension enables you to manage job postings, provides you with an application form and a backend module to manage incoming applications.
TER Extension Releases 24.08.2026 5.1.0jobapplications
Blog
Your Website Has a New Job
b13 Blog (EN) 24.08.2026
Extension
Ai3 Core 0.9.26 (ai3_core)
The shared foundation of the Ai3 Suite - an AI-assisted content-generation toolkit for TYPO3
TER Extension Releases 24.08.2026 0.9.26ai3_core
Extension
Ai3 Summary 0.9.26 (ai3_summary)
Summarize Content for TYPO3 Pages
TER Extension Releases 24.08.2026 0.9.26ai3_summary

Security advisories, releases and news from the TYPO3 ecosystem

In focus