Skip to content
OpenAdvisories

Vendor

hakik

1 known vulnerabilities.

Products

Bifröst – Instant Passwordless Temporary Login Links 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-10299

    WPBifröst – Instant Passwordless Temporary Login Links <= 1.0.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

    The WPBifröst – Instant Passwordless Temporary Login Links plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ctl_create_link AJAX action in all versions up to, and including, 1.0.7. This makes it possible for …

    hakik Bifröst – Instant Passwordless Temporary Login Links Web / CMS