Magic Link vulnerabilities
We track 1 vulnerability in Magic Link products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Magic Link vulnerabilities
- 8.8 High severity
Magic Link: Improper Privilege Management
The Magic Link WordPress plugin before 2.2.6 does not check that the user requesting a login link is authorised to generate one for the chosen account, allowing any authenticated user, such as a subscriber, to generate a working login link for an administrator