CVE-2026-118569

Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

CVE-2026-118570

Cross-Site Request Forgery CSRF vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

CVE-2026-118569

Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

CVE-2026-118569

The Drupal Fasttoggle module (versions 0.0.0 to 4.1.1 ) contains an Incorrect Authorization vulnerability (CWE-863) that allows for Forceful Browsing . The module fails to sufficiently verify if a user has permission to update a specific entity when using the "Use Fasttoggle" permission to toggle...

EUVD-2026-113694

Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

CVE-2026-118570

Cross-Site Request Forgery CSRF vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

EUVD-2026-113693

Cross-Site Request Forgery CSRF vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

CVE-2026-118570

The Fasttoggle module for Drupal (versions 0.0.0 to 4.1.1 ) is vulnerable to a Cross-Site Request Forgery (CSRF) . The module fails to sufficiently protect its toggle URL, which allows users to quickly change the publication status, promotion, and stickiness of nodes and comments. An attacker can...

PT-2026-130597

This module enables you to quickly toggle the publication status, promotion and stickiness of nodes, and the publication status of comments, from links on the page. The module doesn't sufficiently protect against cross-site request forgery CSRF on its toggle URL, under the scenario where a user...

PT-2026-130596

This module enables you to quickly toggle the publication status, promotion and stickiness of nodes, and the publication status of comments, from links on the page. The module doesn't sufficiently check access to the entity being toggled, under the scenario where a user with the "Use Fasttoggle"...

EUVD-2014-5161

Malware in sbrugna...

Code injection

The Fasttoggle module 7.x-1.3 and 7.x-1.4 for Drupal allows remote attackers to block or unblock an account via a crafted user status link...

CVE-2014-5268

The Fasttoggle module 7.x-1.3 and 7.x-1.4 for Drupal allows remote attackers to block or unblock an account via a crafted user status link...

CVE-2014-5268

The Fasttoggle module 7.x-1.3 and 7.x-1.4 for Drupal allows remote attackers to block or unblock an account via a crafted user status link...

CVE-2014-5268

CVE-2014-5268 affects the Drupal contributed module Fasttoggle (7.x-1.3 and 7.x-1.4). The advisory confirms an access-control flaw: remote attackers can block or unblock user accounts via a crafted user status link, due to a rewrite of the access control that mishandles the user status (allow/blo...

CVE-2014-5268: Undefined Security Weakness

The Fasttoggle module 7.x-1.3 and 7.x-1.4 for Drupal allows remote attackers to block or unblock an account via a crafted user status link...

PT-2014-6381

Name of the Vulnerable Software and Affected Versions Fasttoggle module versions 7.x-1.3 through 7.x-1.4 for Drupal Description The issue allows remote attackers to block or unblock an account via a crafted user status link. Recommendations For Fasttoggle module versions 7.x-1.3 and 7.x-1.4,...

SA-CONTRIB-2014-076 - Fasttoggle - Access bypass

This module enables you to quickly toggle various user, node and field related settings via ajax links. The recent 7.x-1.3 and 1.4 releases of the module include a rewrite of the access control which doesn't correctly implement support for the user status allow/block link. This vulnerability is...