Executive brief
This module enables users to log in by email address with minimal configurations.
Drupal core contains protection against brute force attacks via a flood control mechanism. This module's functionality did not replicate the flood control, enabling brute force attacks.
Affected products
- packagist:https://packages.drupal.org/8 drupal/mail_login