https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T16:10:42.845182+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-121848 fkie_cve-2026-121848 2026-11-09T16:10:42.846535+00:00

The Magic Link WordPress plugin before 2.2.6 does not check that the user requesting a login link is authorised to generate one for the chosen account, allowing any authenticated user, such as a subscriber, to generate a working login link for an administrator and log in as them.

 https://db.gcve.eu/vuln/ghsa-874x-phmj-hrr8 GHSA-874x-phmj-hrr8 2026-11-09T16:10:42.846614+00:00

The Magic Link WordPress plugin before 2.2.6 does not check that the user requesting a login link is authorised to generate one for the chosen account, allowing any authenticated user, such as a subscriber, to generate a working login link for an administrator and log in as them.