CVE-2025-10305 | Secure Passkeys Plugin up to 1.2.1 on WordPress delete_passkey authorization

A vulnerability marked as critical has been reported in Secure Passkeys Plugin up to 1.2.1 on WordPress. This affects the function delete_passkey. This manipulation causes missing authorization.

This vulnerability appears as CVE-2025-10305. The attack may be initiated remotely. There is no available exploit.