Contributed Modules

Discover Drupal

Drupal 12.0.0-alpha1 Opens Contributed Project Compatibility Testing

Share

× SHARE

Maintainers finally have a tagged Drupal 12 build to put real projects against. Some compatibility work will need another pass, however, because the dependency target is not yet frozen. ...more

Read Full Content
Security

Drupal Issues 16 Contributed-Project Advisories, Including Five Critical Flaws

Share

× SHARE

Critical ratings are only part of the triage. Project reach varies sharply, and one advisory requires administrators to clean stored data after updating. ...more

Read Full Content
Security

Drupal Security Advisories Cover Information Disclosure, Access Bypass and Cross-Site Scripting

Share

× SHARE

Sites that missed the 26 August security batch still have a clear task: identify affected contrib versions and apply the available fixes. ...more

Read Full Content
Discover Drupal

AI Content Translator 1.0.1 Released for Drupal 11.1 and 12

Share

× SHARE

For multilingual Drupal teams, the key safeguard is control over what AI may refresh. Human-authored or human-edited translations stay untouched unless an overwrite is explicitly requested. ...more

Read Full Content
Security

Five Drupal Advisories Span Access Bypass and SSRF Risks

Share

× SHARE

Five Moderately Critical labels do not describe one kind of failure. Earlier Drupal disclosures show where payment, identity, and outbound-request risks recur, and where the similarities stop at the advisory classification. ...more

Read Full Content
Organization News

PreviousNext’s Drupal Record Spans Contrib, Core, and Governance

Share

× SHARE

A contributed experiment can take years to become a supported core capability. PreviousNext’s history offers one view of the work sustained between those points. ...more

Read Full Content
Discover Drupal

Commerce MRW Connects Drupal Commerce to MRW Shipping Services

Share

× SHARE

Repeated address entry and tracking updates add work after checkout. The release moves core MRW shipment tasks into the backend already used to manage orders. ...more

Read Full Content
Security

Security Updates Fix Entity Browser XSS and Edit in-place field Access Bypass

Share

× SHARE

The same severity label does not mean the same exposure. Site maintainers need to distinguish administrator-dependent XSS from a permission-based field-editing bypass when assessing the two updates. ...more

Read Full Content
Security

Drupal Security Advisories Require One Update and Two Uninstalls

Share

× SHARE

Matching scores can conceal the operational difference between a routine update and a dependency that must be removed. ...more

Read Full Content
Security

Ten Drupal Contrib Advisories Split Between Fixes and Unsupported Projects

Share

× SHARE

A single advisory window can demand upgrades, removals, and tighter environment controls. The correct response depends on support status and exposure conditions, not the severity label alone. ...more

Read Full Content
Security

Drupal Advisories Flag Unsupported Projects, SQL Injection, and AI-Generated HTML

Share

× SHARE

The batch presents three response paths to Drupal site teams: uninstall unsupported projects, patch active modules, and review where untrusted or generated content reaches the rendering layers. ...more

Read Full Content
Discover Drupal

Block Content Explorer Adds Admin View for Drupal Inline Blocks

Share

× SHARE

For Drupal teams using Layout Builder, the harder problem is often not creating inline blocks, but finding them after they leave the editor’s immediate view. ...more

Read Full Content

Latest

DrupalCamp Poland 2026: AI Hallucinations, Drupal System Failures and Agentic Maintenance

11 September 2026
MCPIO Alpha Introduces Two-Tool MCP Interface for Drupal

11 September 2026
DrupalCon Rotterdam Offers Free Drupal in a Day Workshop

11 September 2026

Follow @thedroptimes