TY
Vendor
Typo3
395
CVEs
0
On KEV
16
New 30D
Products
ES7.1
Extension "sgalinski Cookie Consent"
TYPO3
3 CVEs0 on KEV3 new
EA5.3
Extension "Analytics"
TYPO3
2 CVEs0 on KEV2 new
ET7.2
Extension "TYPO3 AI Integration Extension"
TYPO3
2 CVEs0 on KEV2 new
ET6.3
Extension "TYPO3 Fluid-Form by coding.ms"
TYPO3
2 CVEs0 on KEV2 new
ET6.9
Extension "TYPO3 Shop by coding.ms"
TYPO3
2 CVEs0 on KEV2 new
TC8.7
TYPO3 CMS
TYPO3
19 CVEs0 on KEV1 new
EA6.9
Extension "Accessible Form Captcha"
TYPO3
1 CVEs0 on KEV1 new
EF6.3
Extension "FAL Protect"
TYPO3
1 CVEs0 on KEV1 new
EF8.7
Extension "File manager"
TYPO3
1 CVEs0 on KEV1 new
EK6.9
Extension "Kitodo.Presentation"
TYPO3
1 CVEs0 on KEV1 new
TY10.0
Typo3
Typo3
218 CVEs0 on KEV0 new
HS6.1
HTML Sanitizer
TYPO3
6 CVEs0 on KEV0 new
EA7.7
Extension "Apache Solr for TYPO3 - Enterprise Search"
TYPO3
5 CVEs0 on KEV0 new
DF–
Dam Frontend Extension
Typo3
4 CVEs0 on KEV0 new
EF8.3
Extension "femanager"
TYPO3
4 CVEs0 on KEV0 new
WD–
Wec Discussion Forum
Typo3
4 CVEs0 on KEV0 new
EF5.9
Extension "Faceted Search"
TYPO3
3 CVEs0 on KEV0 new
FE5.4
femanager
TYPO3
3 CVEs0 on KEV0 new
PG–
Pdf Generator 2 Extension
Typo3
3 CVEs0 on KEV0 new
AD–
Address Directory
Typo3
2 CVEs0 on KEV0 new
AF–
Air Filemanager
Typo3
2 CVEs0 on KEV0 new
BE–
Beuserswitch
Typo3
2 CVEs0 on KEV0 new
CE–
Commerce Extension
Typo3
2 CVEs0 on KEV0 new
EP–
Eluna Page Comments Extension
Typo3
2 CVEs0 on KEV0 new
EE7.7
Extension "Event management and registration"
TYPO3
2 CVEs0 on KEV0 new
EE7.1
Extension "Events 2"
TYPO3
2 CVEs0 on KEV0 new
ES5.3
Extension "SYSSY - TYPO3 Monitoring & Security Checks"
TYPO3
2 CVEs0 on KEV0 new
PH9.8
Pharstreamwrapper
Typo3
2 CVEs0 on KEV0 new
SF–
Sql Frontend Extension
Typo3
2 CVEs0 on KEV0 new
SF–
SR Feuser Register Extension
Typo3
2 CVEs0 on KEV0 new
TE–
Terminal
Typo3
2 CVEs0 on KEV0 new
TC–
Toi Category
Typo3
2 CVEs0 on KEV0 new
WB–
Wir Ber Uns Extension
Typo3
2 CVEs0 on KEV0 new
WE–
WS Ecard
Typo3
2 CVEs0 on KEV0 new
WG–
WT Gallery
Typo3
2 CVEs0 on KEV0 new
AE–
Advcalendar Extension
Typo3
1 CVEs0 on KEV0 new
AE–
Aeurltool
Typo3
1 CVEs0 on KEV0 new
AB–
Another Backend Login
Typo3
1 CVEs0 on KEV0 new
AU–
Autobeuser
Typo3
1 CVEs0 on KEV0 new
BS–
BB Simplejobs
Typo3
1 CVEs0 on KEV0 new
BR–
Brainstorming
Typo3
1 CVEs0 on KEV0 new
BE–
Branchenbuch Extension
Typo3
1 CVEs0 on KEV0 new
CP–
Cms Poll System Extension
Typo3
1 CVEs0 on KEV0 new
CP–
Codeon Petition Extension
Typo3
1 CVEs0 on KEV0 new
CO5.3
content_consent
TYPO3
1 CVEs0 on KEV0 new
DE–
Dictionary Extension
Typo3
1 CVEs0 on KEV0 new
DI8.8
direct_mail
TYPO3
1 CVEs0 on KEV0 new
DT–
Dl3 TT News Alerts
Typo3
1 CVEs0 on KEV0 new
EP–
Econda Plugin
Typo3
1 CVEs0 on KEV0 new
EA8.2
Extension "Address List"
TYPO3
1 CVEs0 on KEV0 new
EC8.8
Extension "Club Directory"
TYPO3
1 CVEs0 on KEV0 new
EC9.2
Extension "Content Element Selector"
TYPO3
1 CVEs0 on KEV0 new
EE8.8
Extension "E-Mail MFA Provider"
TYPO3
1 CVEs0 on KEV0 new
EF7.7
Extension "Forms Export"
TYPO3
1 CVEs0 on KEV0 new
EF8.8
Extension "Forum"
TYPO3
1 CVEs0 on KEV0 new
EF6.9
Extension "Frontend User Registration"
TYPO3
1 CVEs0 on KEV0 new
EH9.3
Extension "HTML5 Video Player vs. Powermail"
TYPO3
1 CVEs0 on KEV0 new
EI8.8
Extension "Industry Directory"
TYPO3
1 CVEs0 on KEV0 new
EM8.8
Extension "Mailqueue"
TYPO3
1 CVEs0 on KEV0 new
EM6.0
Extension "Mask"
TYPO3
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-112069 | EF Extension "FAL Protect" TYPO3 | 6.3 | Oct 20 | Broken Access Control in extension "FAL Protect" (fal_protect) |
| CVE-2026-112065 | ES Extension "sgalinski Cookie Consent" TYPO3 | 5.3 | Oct 20 | Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin) |
| CVE-2026-112064 | ES Extension "sgalinski Cookie Consent" TYPO3 | 7.1 | Oct 20 | SQL Injection in extension "sgalinski Cookie Consent" (sg_cookie_optin) |
| CVE-2026-112066 | ES Extension "sgalinski Cookie Consent" TYPO3 | 7.1 | Oct 20 | Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin) |
| CVE-2026-112067 | EA Extension "Accessible Form Captcha" TYPO3 | 6.9 | Oct 20 | Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha) |
| CVE-2026-112068 | EA Extension "Analytics" TYPO3 | 5.3 | Oct 20 | Insecure Direct Object Reference in extension "Analytics" (analytics) |
| CVE-2026-112237 | EK Extension "Kitodo.Presentation" TYPO3 | 6.9 | Oct 20 | Server-Side Request Forgery in extension "Kitodo.Presentation" (dlf) |
| CVE-2026-112240 | ET Extension "TYPO3 Fluid-Form by coding.ms" TYPO3 | 6.3 | Oct 20 | Broken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form) |
| CVE-2026-113442 | ET Extension "TYPO3 Fluid-Form by coding.ms" TYPO3 | 5.3 | Oct 20 | Cross-Site Scripting in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form) |
| CVE-2026-112238 | EF Extension "File manager" TYPO3 | 8.7 | Oct 20 | SQL Injection in extension "File manager" (ameos_filemanager) |
| CVE-2026-112071 | ET Extension "TYPO3 Shop by coding.ms" TYPO3 | 6.9 | Oct 20 | Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop) |
| CVE-2026-113468 | ET Extension "TYPO3 Shop by coding.ms" TYPO3 | 6.9 | Oct 20 | Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop) |
| CVE-2026-112239 | ET Extension "TYPO3 AI Integration Extension" TYPO3 | 7.2 | Oct 20 | Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai) |
| CVE-2026-113459 | ET Extension "TYPO3 AI Integration Extension" TYPO3 | 7.1 | Oct 20 | Sensitive Data Exposure in extension "TYPO3 AI Integration Extension" (ns_t3ai) |
| CVE-2026-112070 | EA Extension "Analytics" TYPO3 | 5.3 | Oct 20 | Broken Access Control in extension "Analytics" (analytics) |
| CVE-2026-109162 | TC TYPO3 CMS TYPO3 | 6.3 | Oct 13 | TYPO3 CMS - Security Misconfiguration in Form Framework |
| CVE-2023-50460 | FE femanager TYPO3 | 5.4 | Sep 14 | An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3 |
| CVE-2023-50462 | CO content_consent TYPO3 | 5.3 | Sep 14 | An issue was discovered in the content_consent (aka Content Consent) extension through 2.0.1 for TYPO3 |
| CVE-2023-50461 | DI direct_mail TYPO3 | 8.8 | Sep 14 | An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3 |
| CVE-2023-50459 | FE femanager TYPO3 | 5.4 | Sep 14 | An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3 |
| CVE-2023-45023 | FE femanager TYPO3 | 4.2 | Sep 14 | The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component |
| CVE-2026-77132 | TC TYPO3 CMS TYPO3 | 5.3 | Sep 8 | TYPO3 CMS - Information Disclosure via Backend Localization Wizard |
| CVE-2026-85400 | TC TYPO3 CMS TYPO3 | 7.5 | Sep 8 | TYPO3 CMS - Missing Authorization in lowlevel commands |
| CVE-2026-56092 | EA Extension "Apache Solr for TYPO3 - Enterprise Search" TYPO3 | 7.6 | Aug 25 | Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr) |
| CVE-2026-56093 | EA Extension "Apache Solr for TYPO3 - Enterprise Search" TYPO3 | 6.3 | Aug 25 | Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr) |
| CVE-2026-56094 | EA Extension "Apache Solr for TYPO3 - Enterprise Search" TYPO3 | 6.3 | Aug 25 | Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr) |
| CVE-2026-56095 | EA Extension "Apache Solr for TYPO3 - Enterprise Search" TYPO3 | 7.7 | Aug 25 | Insecure Deserialization in extension "Apache Solr for TYPO3 - Enterprise Search" (solr) |
| CVE-2026-56096 | EA Extension "Apache Solr for TYPO3 - Enterprise Search" TYPO3 | 6.3 | Aug 25 | Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr) |
| CVE-2026-77127 | EM Extension "Modules" TYPO3 | 6.0 | Aug 25 | Information Disclosure in extension "Modules" (modules) |
| CVE-2026-77128 | EE Extension "Event management and registration" TYPO3 | 6.3 | Aug 25 | Broken Access Control in extension "Event management and registration" (sf_event_mgt) |
| CVE-2026-77129 | EE Extension "Event management and registration" TYPO3 | 7.7 | Aug 25 | Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt) |
| CVE-2026-77130 | ES Extension "SYSSY - TYPO3 Monitoring & Security Checks" TYPO3 | 5.3 | Aug 25 | Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy) |
| CVE-2026-77131 | ES Extension "SYSSY - TYPO3 Monitoring & Security Checks" TYPO3 | 5.3 | Aug 25 | Cleartext Transmission of Sensitive Information in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy) |
| CVE-2026-77133 | EF Extension "femanager" TYPO3 | 6.0 | Aug 25 | Broken Access Control in extension "femanager" (femanager) |
| CVE-2026-77134 | EF Extension "femanager" TYPO3 | 8.3 | Aug 25 | Broken Access Control in extension "femanager" (femanager) |
| CVE-2026-77135 | EF Extension "femanager" TYPO3 | 8.2 | Aug 25 | Information Disclosure in extension "femanager" (femanager) |
| CVE-2026-77136 | EP Extension "powermail" TYPO3 | 9.5 | Aug 25 | Server-Side Template Injection in extension "powermail" (powermail) |
| CVE-2026-77137 | EF Extension "Forms Export" TYPO3 | 7.7 | Aug 25 | SQL Injection in extension "Forms Export" (frp_form_answers) |
| CVE-2026-77138 | EH Extension "HTML5 Video Player vs. Powermail" TYPO3 | 9.3 | Aug 25 | Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail) |
| CVE-2026-77139 | EM Extension "Mask" TYPO3 | 6.0 | Aug 25 | Path Traversal in extension "Mask" (mask) |
| CVE-2026-77140 | ET Extension "Telephone Directory" TYPO3 | 8.7 | Aug 25 | Broken Access Control in extension "Telephone Directory" (telephonedirectory) |
| CVE-2026-77141 | EC Extension "Club Directory" TYPO3 | 8.8 | Aug 25 | Broken Access Control in extension "Club Directory" (clubdirectory) |
| CVE-2026-77142 | EI Extension "Industry Directory" TYPO3 | 8.8 | Aug 25 | Broken Access Control in extension "Industry Directory" (yellowpages2) |
| CVE-2026-77143 | EF Extension "Forum" TYPO3 | 8.8 | Aug 25 | Broken Access Control in extension "Forum" (pforum) |
| CVE-2026-77144 | EE Extension "Events 2" TYPO3 | 7.1 | Aug 25 | Broken Access Control in extension "Events 2" (events2) |
| CVE-2026-77145 | EE Extension "Events 2" TYPO3 | 7.1 | Aug 25 | Broken Access Control in extension "Events 2" (events2) |
| CVE-2026-77146 | EF Extension "femanager" TYPO3 | 8.3 | Aug 25 | Broken Access Control in extension "femanager" (femanager) |
| CVE-2026-19418 | TC TYPO3 CMS TYPO3 | 7.3 | Aug 11 | TYPO3 CMS - Broken Access Control in Backend and Install Tool |
| CVE-2026-15305 | TC TYPO3 CMS TYPO3 | 6.3 | Jul 14 | TYPO3 CMS - Unrestricted File Upload in Form Framework |
| CVE-2026-49742 | TC TYPO3 CMS TYPO3 | 7.1 | Jun 9 | TYPO3 CMS - Broken Access Control in Media Module |
| CVE-2026-49741 | TC TYPO3 CMS TYPO3 | 8.7 | Jun 9 | TYPO3 CMS - Privilege Escalation & SQL Injection in Form Framework |
| CVE-2026-49740 | TC TYPO3 CMS TYPO3 | 6.3 | Jun 9 | TYPO3 CMS - Insecure Deserialization in Core API |
| CVE-2026-49738 | TC TYPO3 CMS TYPO3 | 2.1 | Jun 9 | TYPO3 CMS - Broken Access Control in File Abstraction Layer |
| CVE-2026-47352 | TC TYPO3 CMS TYPO3 | 5.3 | Jun 9 | TYPO3 CMS - Broken Access Control in Backend API |
| CVE-2026-47351 | TC TYPO3 CMS TYPO3 | 5.3 | Jun 9 | TYPO3 CMS - Broken Access Control in Clipboard |
| CVE-2026-47350 | TC TYPO3 CMS TYPO3 | 5.3 | Jun 9 | TYPO3 CMS - Broken Access Control in DataHandler |
| CVE-2026-47349 | TC TYPO3 CMS TYPO3 | 5.3 | Jun 9 | TYPO3 CMS - Broken Access Control in Recycler |
| CVE-2026-47348 | TC TYPO3 CMS TYPO3 | 5.1 | Jun 9 | TYPO3 CMS - Cross-Site Scripting in Indexed Search |
| CVE-2026-47347 | TC TYPO3 CMS TYPO3 | 5.3 | Jun 9 | TYPO3 CMS - Open Redirect in Core Utilities |
| CVE-2026-47346 | TC TYPO3 CMS TYPO3 | 7.6 | Jun 9 | TYPO3 CMS - Broken Access Control in Form Framework |
