Login with QR vulnerabilities
We track 1 vulnerability in Login with QR products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Login with QR vulnerabilities
- 9.8 Critical severity
Login with QR: Improper Authentication
The Login with QR WordPress plugin through 1.0.0 does not verify that the code used to log a user in is one it issued, matching any stored user metadata value instead, which allows unauthenticated attackers to log in as any user, including administrators.