WordPress security by component
Magic Login Mail or QR Code
Plugin description
Magic Login Mail or QR Code is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Feb 14, 2026; the highest CVE/CNA score is 8.1.
Plugin slug:
magic-login-mailLatest vulnerability
CVE-2026-2144: Magic Login Mail or QR Code: Privilege escalation or authentication bypass
Magic Login Mail or QR Code is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.
| Safe version |
|
||
|---|---|---|---|
| Feb 14, 2026 |
CVE-2026-2144
Magic Login Mail or QR Code: Privilege escalation or authentication bypass
Magic Login Mail or QR Code is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE8.1
NVDPending
|