CVE-2025-47710

CVE-2025-47710: Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-056

Vendor Drupal
Product Enterprise MFA - TFA for Drupal
Weakness CWE-288
Published May 14, 2025
Last update May 19, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.

Key dates

02Disclosure timeline

May 14, 2025 CVE published
May 19, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-61425 Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 CVE-2026-15014 SMS Alert <= 3.9.7 - Unauthenticated Authentication Bypass to Account Takeover via 'billing_phone' Parameter CVE-2026-42378 WordPress WP Full Stripe Free plugin <= 8.4.1 - Broken Authentication vulnerability CVE-2026-57698 WordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.12 - Broken Authentication vulnerability CVE-2026-66453 WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability