{"affected":[{"defaultStatus":"unaffected","product":"Magic Link","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"2.2.6","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-121848","cwes":["CWE-269"],"description":"The Magic Link  WordPress plugin before 2.2.6 does not check that the user requesting a login link is authorised to generate one for the chosen account, allowing any authenticated user, such as a subscriber, to generate a working login link for an administrator and log in as them.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/00c498cd-5319-47ed-afe6-14359bf1ee70/"}],"kev":null,"metrics":[],"modifiedAt":1794031227414,"publishedAt":1794031227414,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/00c498cd-5319-47ed-afe6-14359bf1ee70/"}],"remediation":[],"revision":"ca07283350a31267f931cbc0cf986b83e82912ff45ff32b1aaef500836b2bd38","sources":[{"modifiedAt":1794031227414,"name":"CNA: WPScan","retrievedAt":1794031729886,"url":"https://www.cve.org/CVERecord?id=CVE-2026-121848"}],"ssvc":null,"status":"published","title":"Magic Link < 2.2.6 - Subscriber+ Privilege Escalation via Magic Link Generation","updatedAt":1794031729886}