TI-2025-09449 CVE-2025-10299 · GHSA-4vhf-2fv2-ggw8
Missing authorization in hakik Bifröst – Instant Passwordless Temporary Login Links
Priority MEDIUM 40
The WPBifröst – Instant Passwordless Temporary Login Links plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ctl_create_link AJAX action in all versions up to, and includ…