CVE-2023-52268

FreeScout End-User Portal Authentication Bypass Exploit CVE-2023-52268 Overview This exploit targets a vulnerability in the FreeScout End-User Portal Module versions below 1.0.65 that allows an attacker to bypass authentication through improper session token management. By generating and testing...

CVE-2026-39912

CVE-2026-39912 - Xboard / V2Board Unauth Account Takeover Magic Link Token Leak in loginWithMailLink | ---|--- CVE| CVE-2026-39912 CVSS| 9.1 Critical CWE| CWE-201 Insertion of Sensitive Information Into Sent Data Affected| V2Board = 1.6.1 through 1.7.4 / Xboard all versions through 0.1.9+ Fixed|...

WordPress Magic Link plugin < 2.2.6 - Subscriber+ Privilege Escalation vulnerability

Subscriber+ Privilege Escalation vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Magic Link versions 2.2.6...

CVE-2026-121848

The Magic Link WordPress plugin before 2.2.6 does not check that the user requesting a login link is authorised to generate one for the chosen account, allowing any authenticated user, such as a subscriber, to generate a working login link for an administrator and log in as them...

CVE-2026-121848 Magic Link < 2.2.6 - Subscriber+ Privilege Escalation via Magic Link Generation

The Magic Link WordPress plugin before 2.2.6 does not check that the user requesting a login link is authorised to generate one for the chosen account, allowing any authenticated user, such as a subscriber, to generate a working login link for an administrator and log in as them...

CVE-2026-121848

The Magic Link WordPress plugin, in versions prior to 2.2.6 , is vulnerable to a privilege escalation flaw due to a lack of authorization checks. The plugin fails to verify if the user requesting a login link is authorized to generate one for the target account. This allows any authenticated user...

EUVD-2026-118946

The Magic Link WordPress plugin before 2.2.6 does not check that the user requesting a login link is authorised to generate one for the chosen account, allowing any authenticated user, such as a subscriber, to generate a working login link for an administrator and log in as them...

CVE-2026-118505: team-alembic ash_authentication: Improper Restriction of Excessive Authentication Attempts vulnerability in team-alembic ash_authentication allows an…

Improper Restriction of Excessive Authentication Attempts vulnerability in team-alembic ashauthentication allows an unauthenticated attacker to guess passwords and one-time passwords without limit. The password, magic link and OTP strategies enforce bruteforcestrategy by adding a preparation only...

Authentication Bypass

Better Auth is vulnerable to authentication bypass. The vulnerability is due to overlapping stored identifiers under specific Magic Link and OAuth configuration settings, which allows an unauthenticated attacker to exploit the OAuth sign-in flow to obtain a valid session for an existing user or...

Better-auth: OAuth State Can Be Used As A Magic Link To Sign In As Another User

Am I affected? You may be affected if you use "better-auth" from "1.4.0-beta.18" through versions before "1.7.7" with the Magic Link plugin and social or Generic OAuth sign-in. You are affected if all of these are true: - Magic Link is enabled with default "storeToken: "plain"", or with...

npm: better-auth: OAuth state can be used as a Magic Link to sign in as another user

npm: better-auth: OAuth state can be used as a Magic Link to sign in as another user vulnerability discovered by ? in WordPress npm better-auth versions = 1.4.0-beta.18, 1.7.7...

GHSA-965C-763C-88JM better-auth: OAuth state can be used as a Magic Link to sign in as another user

Am I affected? You may be affected if you use better-auth from 1.4.0-beta.18 through versions before 1.7.7 with the Magic Link plugin and social or Generic OAuth sign-in. You are affected if all of these are true: - Magic Link is enabled with default storeToken: "plain", or with storeToken:...

better-auth: OAuth state can be used as a Magic Link to sign in as another user

Am I affected? You may be affected if you use better-auth from 1.4.0-beta.18 through versions before 1.7.7 with the Magic Link plugin and social or Generic OAuth sign-in. You are affected if all of these are true: - Magic Link is enabled with default storeToken: "plain", or with storeToken:...

EUVD-2026-108256

better-auth: OAuth state can be used as a Magic Link to sign in as another user...

Improper Authentication

Overview better-auth is a The most comprehensive authentication library for TypeScript. Affected versions of this package are vulnerable to Improper Authentication via insufficient isolation of verification records across different authentication flows. Because magic-link tokens and OAuth state...

CVE-2026-114607

Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until 1.7.7, deployments that enable Magic Link with storeToken set to plain, or with storeToken set to hashed and the global verification.storeIdentifier setting also set to hashed, enable a built-in...

CVE-2026-114607 better-auth: OAuth state can be used as a Magic Link to sign in as another user

Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until 1.7.7, deployments that enable Magic Link with storeToken set to plain, or with storeToken set to hashed and the global verification.storeIdentifier setting also set to hashed, enable a built-in...

CVE-2026-114607 better-auth: OAuth state can be used as a Magic Link to sign in as another user

Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until 1.7.7, deployments that enable Magic Link with storeToken set to plain, or with storeToken set to hashed and the global verification.storeIdentifier setting also set to hashed, enable a built-in...

CVE-2026-114607

The better-auth authentication and authorization library for TypeScript (versions 1.4.0-beta.18 to 1.7.7 ) contains a vulnerability where an OAuth sign-in state can be misused as a Magic Link token. This occurs when specific configurations are met: Magic Link is enabled with storeToken set to pla...

CVE-2026-114607

Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until 1.7.7, deployments that enable Magic Link with storeToken set to plain, or with storeToken set to hashed and the global verification.storeIdentifier setting also set to hashed, enable a built-in...