Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress vulnerabilities
1 known vulnerability in Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress from Pluginly. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest first
- 8.1 High severity
Login Me Now – Passwordless, Magic Link, OTP &…: Missing Authentication for Critical Functionality
The Login Me Now plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.2. This is due to insecure authentication based on an arbitrary transient name in the 'AutoLogin::listen()' function. This makes it possible for