CVE-2025-3129

The Drupal Access code module (versions before 2.0.4 ) is vulnerable to a Brute Force attack due to Improper Restriction of Excessive Authentication Attempts . The module allows users to log in using short access codes instead of standard credentials but fails to provide sufficient protection aga...

CVE-2025-10928

The Drupal Access code module is vulnerable to a brute force attack due to an improper restriction of excessive authentication attempts . This issue affects versions prior to 2.0.5 . The vulnerability stems from an unrestricted number of authentication attempts, which could allow an attacker to g...