Log in Start free

TYPO3

Products

ProductCVEsExploitedLatest
TYPO3 CMS54–Oct 13, 2026
typo346–May 20, 2025
HTML Sanitizer6–Jun 8, 2026
Extension "Mail"6–Nov 3, 2026
Extension "femanager"5–Aug 25, 2026
Extension "Apache Solr for TYPO3 - Enterprise Search"5–Aug 25, 2026
ns backup extension3–May 21, 2025
Extension "Faceted Search"3–May 19, 2026
Extension "sgalinski Cookie Consent"3–Oct 20, 2026
femanager3–Sep 14, 2026
Extension "Events 2"2–Aug 25, 2026
Extension "Analytics"2–Oct 20, 2026
Extension "Event management and registration"2–Aug 25, 2026
Extension "Frontend User Registration"2–Nov 3, 2026
Extension "Mailqueue"2–Mar 17, 2026
Extension "Modules"2–Aug 25, 2026
Extension "powermail"2–Aug 25, 2026
Extension "SYSSY - TYPO3 Monitoring & Security Checks"2–Aug 25, 2026
Extension "TYPO3 AI Integration Extension"2–Oct 20, 2026
Extension "TYPO3 Fluid-Form by coding.ms"2–Oct 20, 2026
Extension "TYPO3 Shop by coding.ms"2–Oct 20, 2026
Fluid2–Nov 17, 2020
sr feuser register extension2–May 21, 2025
Extension "Kitodo.Presentation"1–Oct 20, 2026
Extension "Content Element Selector"1–May 19, 2026
femanager extension1–May 21, 2025
Extension "Mask"1–Aug 25, 2026
cs seo extension1–May 21, 2025
Extension "News system"1–May 19, 2026
Extension "Accessible Form Captcha"1–Oct 20, 2026
Extension "Redirect Tabs"1–Mar 17, 2026
Extension "Club Directory"1–Aug 25, 2026
Extension "Site Crawler"1–May 19, 2026
direct_mail1–Sep 14, 2026
Extension "Telephone Directory"1–Aug 25, 2026
oidc1–Mar 16, 2025
Extension "TYPO3 Backup Plus"1–Sep 2, 2025
reint downloadmanager extension1–May 21, 2025
content_consent1–Sep 14, 2026
cms-rte-ckeditor1–Jul 21, 2023
Extension "FAL Protect"1–Oct 20, 2026
Extension "E-Mail MFA Provider"1–Mar 17, 2026
Extension "File manager"1–Oct 20, 2026
Extension "Form to Database" (form_to_database)1–Sep 16, 2025
Extension "Forms Export"1–Aug 25, 2026
Extension "Forum"1–Aug 25, 2026
Extension "Address List"1–May 19, 2026
Extension "HTML5 Video Player vs. Powermail"1–Aug 25, 2026
Extension "Industry Directory"1–Aug 25, 2026

Exploited and recent CVEs

  • CVE-2026-120327 Medium 5.3 Open Redirection in extension "Mail" (mail) 0.3%
  • CVE-2026-120328 Medium 6.9 Information Disclosure in extension "Mail" (mail) 0.4%
  • CVE-2026-120329 Medium 5.3 Broken Access Control in extension "Mail" (mail) 0.3%
  • CVE-2026-120330 High 7.1 Broken Access Control in extension "Mail" (mail) 0.4%
  • CVE-2026-120331 Medium 5.3 Server-Side Request Forgery in extension "Mail" (mail) 0.3%
  • CVE-2026-120332 Medium 5.1 Cross-Site Scripting in extension "Mail" (mail) 0.3%
  • CVE-2026-120333 High 8.8 Broken Access Control in extension "Frontend User Registration" (sf_register) 0.4%
  • CVE-2026-112069 Medium 6.3 Broken Access Control in extension "FAL Protect" (fal_protect) 0.5%
  • CVE-2026-112065 Medium 5.3 Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin) 0.3%
  • CVE-2026-112064 High 7.1 SQL Injection in extension "sgalinski Cookie Consent" (sg_cookie_optin) 0.4%
  • CVE-2026-112066 High 7.1 Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin) 0.4%
  • CVE-2026-112067 Medium 6.9 Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha) 0.4%
  • CVE-2026-112068 Medium 5.3 Insecure Direct Object Reference in extension "Analytics" (analytics) 0.3%
  • CVE-2026-112237 Medium 6.9 Server-Side Request Forgery in extension "Kitodo.Presentation" (dlf) 0.4%
  • CVE-2026-112240 Medium 6.3 Broken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form) 0.4%
  • CVE-2026-113442 Medium 5.3 Cross-Site Scripting in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form) 0.5%
  • CVE-2026-112238 High 8.7 SQL Injection in extension "File manager" (ameos_filemanager) 0.4%
  • CVE-2026-112071 Medium 6.9 Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop) 0.4%
  • CVE-2026-113468 Medium 6.9 Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop) 0.4%
  • CVE-2026-112239 High 7.2 Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai) 0.4%
  • CVE-2026-113459 High 7.1 Sensitive Data Exposure in extension "TYPO3 AI Integration Extension" (ns_t3ai) 0.4%
  • CVE-2026-112070 Medium 5.3 Broken Access Control in extension "Analytics" (analytics) 0.3%
  • CVE-2026-109162 Medium 6.3 TYPO3 CMS - Security Misconfiguration in Form Framework 0.4%
  • CVE-2023-45023 Medium 4.2 The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component. 0.2%
  • CVE-2023-50459 Medium 5.4 An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for the edit user component. An authenticated frontend user can exploit this to eith 0.3%
  • CVE-2023-50460 Medium 5.4 An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actions (userLogout, confirmUser, refuseUser, 0.3%
  • CVE-2023-50461 High 8.8 An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3. The Configuration backend module of the extension allows an authenticated user to write to an arbitrary 0.5%
  • CVE-2023-50462 Medium 5.3 An issue was discovered in the content_consent (aka Content Consent) extension through 2.0.1 for TYPO3. It fails to verify whether a specified content element identifier is permitted by the plugin. Th 0.3%
  • CVE-2026-77132 Medium 5.3 TYPO3 CMS - Information Disclosure via Backend Localization Wizard 0.4%
  • CVE-2026-85400 High 7.5 TYPO3 CMS - Missing Authorization in lowlevel commands 0.5%