WordPress Login with QR Plugin Unauthenticated Login Vulnerability

The Login with QR WordPress plugin, up to version 1.0.0, has a critical security flaw. It does not validate the QR code used for login, allowing attackers to log in as any user, including administrators, by matching any stored user metadata value.

This vulnerability affects all versions of the Login with QR plugin up to and including 1.0.0.