Skip to content
OpenAdvisories

Product · Drupal

Authenticator Login Plus (2FA)

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-107254

    Authenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.

    Drupal Authenticator Login Plus (2FA) drupal/auth_login_plus Packagist
  • Medium 4.2
    CVE-2026-107261

    Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.

    Drupal Authenticator Login Plus (2FA) drupal/auth_login_plus Packagist