[HIGH] The Front End User Registration extension for TYPO3 (sr_feuser_register) allows Insecure Direct Object Reference

PKSA-6x8h-qxw4-n4zv CVE-2025-48205 GHSA-cvgc-mx2w-h3w8

Affected version: >=5.1.0,<12.5.0

Reported by:
GitHub

[CRITICAL] TYPO3-EXT-SA-2025-008: Multiple vulnerabilities in extension "Front End User Registration" (sr_feuser_register)

PKSA-c6tr-p1v1-385w CVE-2025-48200 GHSA-qfm8-78qf-p75j

Affected version: >=5.1.0,<12.5.0

Reported by:
GitHub, FriendsOfPHP/security-advisories

[MEDIUM] Front End User Registration (sr_feuser_register) extension for TYPO3 allows remote attackers to obtain user names, passwords

PKSA-c45q-2z9w-x5tj CVE-2012-5890 GHSA-m646-h2pw-56h4

Affected version: <2.6.2

Reported by:
GitHub

[HIGH] Frontend User Registration extension for TYPO3 does not properly verify access rights

PKSA-p73c-vpkm-yhxy CVE-2009-1264 GHSA-rjrq-93hp-22ww

Affected version: <2.5.21

Reported by:
GitHub