p PatchFirst

PatchFirst · Latest vulnerabilities

ralffreit/mfa-email vulnerabilities

Vulnerabilities published for ralffreit/mfa-email in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-4208

    High · CVSS 7.7EPSS 0.27%Fix available

    Authentication Bypass in extension "E-Mail MFA Provider" (mfa_email)

    The extension fails to properly reset the generated MFA code after successful authentication. This leads to a possible MFA bypass for future login attempts by providing an empty string as MFA code to the extensions MFA provider.

    ralffreit/mfa-email ralffreit/mfa-emailPHP
    • Update to 1.0.7
    • Update to 2.0.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →