Package · Packagist

drupal/auth_login_plus

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

Unscored —

CVE-2026-126731

This module enables you to require a second authentication factor (a time-based one-time password from an authenticator…

drupal/auth_login_plus Packagist

Nov 11, 2026
Unscored —

CVE-2026-126730

This module enables you to require a second authentication factor (a time-based one-time password from an authenticator…

drupal/auth_login_plus Packagist

Nov 11, 2026
Unscored —

CVE-2026-126729

This module enables you to require a second authentication factor (a time-based one-time password from an authenticator…

drupal/auth_login_plus Packagist

Nov 11, 2026
Medium 4.8

CVE-2026-107254

Authenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.

Drupal Authenticator Login Plus (2FA) drupal/auth_login_plus Packagist

Oct 30, 2026
Medium 4.2

CVE-2026-107261

Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.

Drupal Authenticator Login Plus (2FA) drupal/auth_login_plus Packagist

Oct 30, 2026