Medium
grav-plugin-login 3.8.7 through 3.9.6 Two-Factor Authentication Bypass
Type: advisorySource: Official CVE List
grav-plugin-login (the Grav CMS Login plugin) versions >= 3.8.7 and < 3.9.7 allow the two-factor authentication challenge to be bypassed for content gated by the authenticated() Twig function or the [authenticated] sh…
Products: gravCVEs: CVE-2026-100667