Composer in2code/femanager has 13 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2014-6292 | TYPO3 femanager extension allows remote frontend users to modify or delete records of other frontend users | medium | 0.0 | <1.0.9 | 1.0.9 |
| CVE-2021-36787 | Cross-site Scripting in the femanager TYPO3 extension | medium | 0.0 | <5.5.1 or >=6.0.0 and <6.3.1 | 5.5.1, 6.3.1 |
| CVE-2022-44543 | TYPO3 Extension femanager vulnerable to Broken Access Control | medium | 6.5 | >=7.0.0 and <7.0.1 or >=6.0.0 and <6.3.3 or <5.5.2 | 7.0.1, 6.3.3, 5.5.2 |
| CVE-2023-25013 | Broken Access Control in 3rd party TYPO3 extension "femanager" | high | 8.6 | <5.5.3 or >=6.0.0 and <6.3.4 or >=7.0.0 and <7.1.0 | 5.5.3, 6.3.4, 7.1.0 |
| CVE-2023-25014 | Broken Access Control in 3rd party TYPO3 extension "femanager" | high | 8.6 | <5.5.3 or >=6.0.0 and <6.3.4 or >=7.0.0 and <7.1.0 | 5.5.3, 6.3.4, 7.1.0 |
| CVE-2026-77146 | TYPO3-EXT-SA-2026-024: Broken Access Control in extension "femanager" (femanager) | unknown | 0.0 | >=8.0.0 and <8.4.2 | 8.4.2 |
| CVE-2026-77134 | TYPO3-EXT-SA-2026-024: Broken Access Control in extension "femanager" (femanager) | unknown | 0.0 | >=13.0.0 and <13.3.5 or >=8.0.0 and <8.4.2 or >=7.0.0 and <7.5.5 or <6.4.5 | 13.3.5, 8.4.2, 7.5.5, 6.4.5 |
| CVE-2026-77135 | TYPO3-EXT-SA-2026-024: Information Disclosure in extension "femanager" (femanager) | unknown | 0.0 | >=13.0.0 and <13.3.5 or >=8.0.0 and <8.4.2 or >=7.0.0 and <7.5.5 or <6.4.5 | 13.3.5, 8.4.2, 7.5.5, 6.4.5 |
| CVE-2026-77133 | TYPO3-EXT-SA-2026-024: Broken Access Control in extension "femanager" (femanager) | unknown | 0.0 | >=13.0.0 and <13.3.5 or >=8.0.0 and <8.4.2 or >=7.0.0 and <7.5.5 or <6.4.5 | 13.3.5, 8.4.2, 7.5.5, 6.4.5 |
| CVE-2025-48202 | The femanager TYPO3 extension allows Insecure Direct Object Reference | medium | 5.3 | >=8.0.0 and <8.2.2 or >=7.0.0 and <7.4.2 or >=6.0.0 and <6.4.1 or >=5.5.0 and <5.5.5 | 8.2.2, 7.4.2, 6.4.1, 5.5.5 |
| CVE-2023-50459 | Broken Access Control in extension "femanager" | medium | 5.4 | >=7.0.0 and <7.2.3 | 7.2.3 |
| CVE-2025-7900 | Femanager extension for TYPO3 allows Insecure Direct Object Reference | medium | 0.0 | <6.4.2 or >=7.0.0 and <7.5.3 or >=8.0.0 and <8.3.1 | 6.4.2, 7.5.3, 8.3.1 |
| CVE-2023-45023 | TYPO3 extension femanager Broken Access Control vulnerability | medium | 0.0 | >=7.0.0 and <7.2.2 | 7.2.2 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked