PatchTheCVE: two-factor authentication project

PatchTheCVE: two-factor authentication projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-7030: Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication (TFA) allows Exploitinhttps://patchthecve.com/cve/CVE-2025-7030.htmlhttps://patchthecve.com/cve/CVE-2025-7030.htmlWed, 17 Jun 2026 10:04:07 +0000MEDIUM 6.5: Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication (TFA) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.11.0.CVE-2025-31694: Incorrect Authorization vulnerability in Drupal Two-factor Authentication (TFA) allows Forceful Browsing.This https://patchthecve.com/cve/CVE-2025-31694.htmlhttps://patchthecve.com/cve/CVE-2025-31694.htmlWed, 17 Jun 2026 09:10:47 +0000HIGH 8.1: Incorrect Authorization vulnerability in Drupal Two-factor Authentication (TFA) allows Forceful Browsing.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.10.0.CVE-2024-13279: Session Fixation vulnerability in Drupal Two-factor Authentication (TFA) allows Session Fixation.This issue afhttps://patchthecve.com/cve/CVE-2024-13279.htmlhttps://patchthecve.com/cve/CVE-2024-13279.htmlWed, 17 Jun 2026 07:01:40 +0000CRITICAL 9.8: Session Fixation vulnerability in Drupal Two-factor Authentication (TFA) allows Session Fixation.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.8.0.CVE-2024-13239: Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This ihttps://patchthecve.com/cve/CVE-2024-13239.htmlhttps://patchthecve.com/cve/CVE-2024-13239.htmlWed, 17 Jun 2026 07:01:33 +0000CRITICAL 9.8: Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.5.0.