Bifröst
Limited data: Bifröst has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is Bifröst still maintained?
- Yes. Last release 3 Nov 2026, 6 releases in the last 24 months. 3 Nov 2026 · wordpress.org
- Who owns Bifröst, and has it changed hands?
- Changed. New committer Hakik made a first commit on 3 Nov 2026. 3 Nov 2026 · SVN log
- Was Bifröst removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is Bifröst safe?
- 1 known vulnerability, fixed (latest in 1.0.8). Not on the exploited list. 14 Oct 2025 · Wordfence Intelligence
- Is the latest Bifröst update safe to install?
- Caution. Ownership change before 1.0.11: new committer Hakik made a first commit on 3 Nov 2026. No one-star spike after it. 3 Nov 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 7 May 2024 to 7 May 2024, 1 commits |
|---|---|
| Hakik | 8 May 2024 to 3 Nov 2026, 20 commits |
New committer Hakik made a first commit on 3 Nov 2026.
Maintenance
- Last release
- 2 days ago
- Releases, 24 months
- 6
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 5 |
| Q3 2024 | 1 |
| Q4 2024 | 1 |
| Q1 2025 | 0 |
| Q2 2025 | 1 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 2 |
| Q2 2026 | 1 |
| Q3 2026 | 0 |
| Q4 2026 | 1 |
Last release 3 Nov 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: no reviews.
| 5 star | 0 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Security record
1 vulnerability in 24 months, patched (latest fixed in 1.0.8).
Show 1 patched vulnerability
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 14 Oct 2025 | WPBifröst - Instant Passwordless Temporary Login Links <= 1.0.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation | 8.8 | <= 1.0.7 | 1.0.8 | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
40+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 1.0.11 |
|---|---|
| Author | Hakik Zaman |
| Added | 8 May 2024 |
| Last updated | 3 Nov 2026 |
| Active installs | 40+ |
| Requires WordPress | 6.2 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | not stated |
| Tags | login, temporary login, temporary access, passwordless login |
Other plugins by this author: Custom Login Logo, Hello Lyrics, BS4WP Component
Questions
Is Bifröst still maintained?
Yes. Last release 3 Nov 2026, 6 releases in the last 24 months.
Who owns Bifröst, and has it changed hands?
Changed. New committer Hakik made a first commit on 3 Nov 2026.
Was Bifröst removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is Bifröst safe?
1 known vulnerability, fixed (latest in 1.0.8). Not on the exploited list.
Is the latest Bifröst update safe to install?
Caution. Ownership change before 1.0.11: new committer Hakik made a first commit on 3 Nov 2026. No one-star spike after it.