| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/auth_login_plus | < 1.0.1 | 1.0.1 |
This module provides TOTP-based two-factor authentication (2FA) for Drupal, with an optional setting to enforce 2FA for all users site-wide.
The module may allow a user log in with only a password even when site-wide enforcement of 2FA is turned on.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free