Thanks. I have solved this simply by changing the order of parameters. First “token” and then “action”.
After an investigation I found out the problem is the parameter name “token”. I checked WP reserved words and the word “token” is not among them. If i change “token” for example to “t0ken” it works as expected.
I reinstall the plugin, version 2020, without any success.
This is what is in the page:
[advanced_iframe width="100%" height="900" src="https://gesla.govedo.si" url_forward_parameter="ALL"]
This is the link. The second parameter is ignored.
https://www.govedo.si/ponastavitev-gesla/index.php?action=resetbytoken&token=1254fsdfjksde236523