Known Vulnerabilities for Email Login OTP by Drupal
Listed below are 10 of the newest known vulnerabilities associated with "Email Login OTP" by "Drupal".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-77264 json | The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerab... | Not Provided | 2026-08-21 | 2026-08-21 |
| CVE-2026-77000 json | The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the ... | Not Provided | 2026-08-22 | 2026-08-23 |
| CVE-2026-76574 json | A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of t... | Not Provided | 2026-08-19 | 2026-08-25 |
| CVE-2026-75778 json | A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::select_with_... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-73306 json | Budibase is an open-source low-code platform. Prior to 3.39.25, POST /api/global/auth/:tenantId/login incremented the failure... | Not Provided | 2026-08-12 | 2026-08-13 |
| CVE-2026-72772 json | n8n before 2.32.1 (and before 2.31.5) is vulnerable to account takeover via the Token Exchange Embed Login feature. When a va... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-72699 json | The Grav Login plugin (getgrav/grav-plugin-login) before 3.9.1 is vulnerable to email address enumeration. The register() met... | Not Provided | 2026-08-25 | 2026-08-25 |
| CVE-2026-71248 json | Inventory-Management-System-PHP's login.php constructs its authentication query via direct string concatenation of raw POST p... | Not Provided | 2026-08-05 | 2026-08-10 |
| CVE-2026-68067 json | The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active sess... | Not Provided | 2026-08-11 | 2026-08-12 |
| CVE-2026-64822 json | djangoSIGE through 1.10 (commit a6fe7e8) contains a user enumeration vulnerability in ForgotPasswordView within djangosige/ap... | Not Provided | 2026-07-21 | 2026-07-22 |