https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:50:29.383171+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-251780 EUVD-2026-251780 2026-10-04T10:50:29.445143+00:00 EUVD-2026-251780 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5658 fkie_cve-2024-5658 2026-10-04T10:50:29.445202+00:00

The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period.

 https://cve.radiocsirt.org/vuln/ghsa-96qm-hwhp-2rm8 GHSA-96qm-hwhp-2rm8 — Improper Authentication in CraftCMS two factor authentication plugin 2026-10-04T10:50:29.445250+00:00

Affected: Packagist: born05/craft-twofactorauthentication

The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period.