CVE-2026-121848 | Magic Link Plugin up to 2.2.5 on WordPress privileges management

November 7, 2026 Yanac

A vulnerability marked as critical has been reported in Magic Link Plugin up to 2.2.5 on WordPress. This vulnerability affects unknown code. This manipulation causes improper privilege management.

This vulnerability is tracked as CVE-2026-121848. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More