A vulnerability classified as problematic was found in Magic Login Mail or QR Code Plugin up to 2.05 on WordPress. This impacts the function wp_mail of the component QR Code File Storage. Such manipulation leads to race condition.

This vulnerability is documented as CVE-2026-2144. The attack can be executed remotely. There is not any exploit available.