Pluginly vulnerabilities
We track 1 vulnerability in Pluginly products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 27, 2025.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Pluginly vulnerabilities
- 8.1 High severity
Login Me Now – Passwordless, Magic Link, OTP &…: Missing Authentication for Critical Functionality
The Login Me Now plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.2. This is due to insecure authentication based on an arbitrary transient name in the 'AutoLogin::listen()' function. This makes it possible for