Social Login, Passkeys, Magic Link & Email OTP vulnerabilities
We track 1 vulnerability in Social Login, Passkeys, Magic Link & Email OTP products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 20, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Social Login, Passkeys, Magic Link & Email OTP vulnerabilities
- 8.1 High severity
Social Login, Passkeys, Magic Link & Email OTP: Improper Privilege Management
The Social Login, Passkeys, Magic Link & Email OTP WordPress plugin before 1.4.1 does not enforce rate limiting or a working attempt lockout on its passwordless email one-time-password verification, and stores the short numeric codes in plaintext, allowing an