Drupal One Time Password vulnerabilities

3 vulnerabilities

Known vulnerabilities in Drupal One Time Password, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.8CVE-2025-48012drupalone time password+1
EPSS score
0.26%
Authentication Bypass by Capture-replay vulnerability in Drupal One Time Password allows Remote Services with Stolen Credentials.This issue affects One Time Password: from 0.0.0 before 1.3.0.4.8CVE-2025-48011drupalone time password+1
EPSS score
0.32%
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 before 1.3.0.4.8CVE-2025-48010drupalone time password+1
EPSS score
0.26%
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 before 1.3.0.