Vulnerability in Social Login, Passkeys, Magic Link & Email Otp

CVE-2026-13142

The Social Login, Passkeys, Magic Link & Email OTP WordPress plugin before 1.4.1 does not enforce rate limiting or a working attempt lockout on its passwordless email one-time-password verification, and stores the short numeric codes in p…

EPSS: 0.001 (3.4th percentile) — read the EPSS interpretation.

Affected products

  • Unknown Social Login, Passkeys, Magic Link & Email Otp — versions 0

References