Bifröst – Instant Passwordless Temporary Login Links vulnerabilities
1 known vulnerability in Bifröst – Instant Passwordless Temporary Login Links from Hakik. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
Bifröst – Instant Passwordless Temporary Login…: Missing Authorization
The WPBifröst – Instant Passwordless Temporary Login Links plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ctl_create_link AJAX action in all versions up to, and including, 1.0.7. This makes it possible for a