BSM Magic Login 1.0.35
Fixed: malformed legacy passkey records no longer crash the passkey options handler.
Fixed: request parameters are validated before being used in WebAuthn flows.
Improved: a readable error is shown when WordPress returns an HTML server error.
Preserved: existing valid credentials, Free email code/link settings, licensing, and native login recovery.
Verification: PHP lint, JS syntax and ZIP integrity; live WordPress/WebAuthn not verified.
