CyberSecBulletin

Katsushi-kawamori vulnerabilities

We track 1 vulnerability in Katsushi-kawamori products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 14, 2026.

1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score

Latest Katsushi-kawamori vulnerabilities

  • 8.1 High severity

    Magic Login Mail or QR Code: Improper Privilege Management

    CVE-2026-2144Katsushi-kawamori

    The Magic Login Mail or QR Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.05. This is due to the plugin storing the magic login QR code image with a predictable, static filename (QR_Code.png) in the publ