Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Drupal Email Verification / SMS Verification / OTP Verification 2.4.0 Clear all filters
TI-2026-79081 CVE-2026-84923 · GHSA-p8c3-wh64-8w7c

Authentication bypass in Drupal Email Verification / SMS Verification

Priority LOW 29

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Authentication Bypass.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00309 Published 2026-10-22 Fixed in 2.4.0 CWE-288
TI-2026-79082 CVE-2026-84924 · GHSA-cr9m-wc8j-vr2m

Reflected cross-site scripting in Drupal Email Verification module

Priority LOW 24

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Reflected XSS.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0023 Published 2026-10-22 Fixed in 2.4.0 CWE-79