Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress

Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 8.1, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Authentication Bypass Using An Alternate Path Or Channel, behind 1 of the records (100%).

The one issue recorded for Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress has a vendor fix available, so running the current release closes it.

All of these findings were reported by István Márton. Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSHigh
8.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.1CVE-2025-1717

Login Me Now <= 1.7.2 - Authentication Bypass

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress banner
Latestv1.17

Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress

BetterDots

Author

BetterDots

5.0(9)
100/100
Last Updated
2026-08-31 (13d ago)
Active Installs
500+
Downloads
15,926
Requires WP
5.6+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2023-01-21 (4y ago)

What is Login Me Now? Login Me Now is a modern login and access control solution for WordPress. It helps you: Grant temporary access with secure one-time links Log in without passwords Offer Google and Facebook social login Switch between user accounts instantly Use browser extensions for one-click dashboard access Verify users with SMS-based one-time passwords Track login history and activity Manage modules, integrations, and features from a single hub New: Phone OTP Login Allow users to verify identity with one-time passwords delivered via SMS using Firebase or Twilio. Improved Email Magic Link Refined modal, confirmation step, and updated email template for a more professional experience. Video Overview Watch a quick 38-second overview of the problem, solution, and features: Key Features Passwordless & Temporary Login Generate secure login links with expiration time (hours or days) No passwords needed — secure login with one click Control access using validity periods and conditional settings Social Login Google and Facebook login support Use shortcodes to place login buttons anywhere Pro: Sync profile photo and name Pro: Redirect users to any page after login Phone OTP Login (New) OTP delivery through Firebase or Twilio Verify Rate limiting, resend cooldown, and reCAPTCHA supported Country flag selector and restriction options Store and normalize phone numbers in user profiles Works via shortcode or wp-login.php login provider interface User Switching Instantly switch between user accounts No logout/login cycles required Email Magic Link Single-use secure login links Clean modal with validation and success confirmation Friendly email template with clear CTA Activity Log Integrates with Simple History Track who logged in and how they authenticated Browser Extensions Chrome Extension Firefox Add-on Uses encrypted JWT tokens for secure and fast access No passwords are stored in the extension Modules Hub (New) Toggle modules, integrations, and upcoming features from one dashboard Search, filter, and manage active, available, and upcoming modules Module state persists automatically Shortcodes Use these shortcodes to display login buttons anywhere: [login_me_now_google_button] [login_me_now_facebook_button] [login_me_now_phone_otp_button] [login_me_now_email_magic_link_button] Use Cases Site Owners: Give temporary access without sharing passwords Developers: Request secure client access instead of asking for admin credentials Agencies: Switch between multiple user accounts easily Integrations All-in-One Content Restriction WooCommerce Easy Digital Downloads Directorist Simple History Fluent Support Coming Soon: Tutor LMS, BuddyBoss, BuddyPress, Dokan, bbPress Why Choose Login Me Now? Encrypted, time-sensitive authentication Faster, smoother login flows Works for both beginners and power users Actively updated and maintained Pro Features Social login profile sync (name, avatar) Custom redirect after login More integrations (coming soon) WooCommerce express login (coming soon) Advanced OTP enhancements (coming soon) Priority support Pro version: https://loginmenow.com/pricing/ FIND AN ISSUE? Support forum: https://wordpress.org/support/plugin/login-me-now/ Please search existing topics before opening a new one.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C