CVE-2026-121848

The Magic Link WordPress plugin (versions before 2.2.6 ) contains a vulnerability where it fails to verify if a requesting user is authorized to generate a login link for a specific account. This flaw allows any authenticated user, such as a subscriber , to generate a valid login link for an admi...