Lucene search
+L

9829 matches found

NVD
NVD
•added 2025/04/24 9:15 a.m.•29 views

CVE-2025-3603

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like password. This makes it possible for...

9.8CVSS0.00551EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/04/24 9:15 a.m.•25 views

CVE-2025-3604

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for unauthenticated...

9.8CVSS5.9AI score0.00722EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/04/24 8:23 a.m.•9 views

CVE-2025-3603 Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Password Update

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like password. This makes it possible for...

9.8CVSS7.5AI score0.00551EPSS
SaveExploits0References2
CVE
CVE
•added 2025/04/24 8:23 a.m.•95 views

CVE-2025-3603

CVE-2025-3603 (Flynax Bridge, WordPress) is an unauthenticated privilege-escalation flaw in the Flynax Bridge plugin, affecting versions up to and including 2.2.0. The root cause is improper validation of a user’s identity before updating user details (e.g., passwords), enabling an unauthenticate...

9.8CVSS9.8AI score0.00551EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2025/04/24 8:23 a.m.•68 views

CVE-2025-3603 Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Password Update

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like password. This makes it possible for...

9.8CVSS0.00551EPSS
SaveExploits0References3
CVE
CVE
•added 2025/04/24 8:23 a.m.•113 views

CVE-2025-3604

CVE-2025-3604 affects the WordPress plugin Flynax Bridge (versions up to and including 2.2.0). The issue is unauthenticated privilege escalation via account takeover caused by insufficient validation of a user’s identity before updating details like email, enabling an attacker to change arbitrary...

9.8CVSS8.2AI score0.00722EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2025/04/24 8:23 a.m.•63 views

CVE-2025-3604 Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Account Takeover

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for unauthenticated...

9.8CVSS0.00722EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/04/24 8:23 a.m.•17 views

CVE-2025-3604 Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Account Takeover

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for unauthenticated...

9.8CVSS7.5AI score0.00722EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/04/24 12:00 a.m.•26 views

PT-2025-17717

Name of the Vulnerable Software and Affected Versions Flynax Bridge plugin for WordPress versions up to, and including, 2.2.0 Description The issue is related to privilege escalation via account takeover due to the plugin not properly validating a user's identity prior to updating their details,...

9.8CVSS7.3AI score0.00722EPSS
SaveExploits1References14
CNNVD
CNNVD
•added 2025/04/24 12:00 a.m.•25 views

WordPress plugin Flynax Bridge has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.7AI score0.00722EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/04/24 12:00 a.m.•56 views

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7455-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7455-1 advisory. Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A...

8.8CVSS6.9AI score0.08859EPSS
SaveExploits13References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/24 12:00 a.m.•8 views

CVE-2025-3603: Unverified Password Change

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like password. This makes it possible for...

9.8CVSS5.8AI score0.00551EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/24 12:00 a.m.•27 views

PT-2025-17716

Name of the Vulnerable Software and Affected Versions Flynax Bridge plugin for WordPress versions up to and including 2.2.0 Description The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover. This issue arises because the plugin does not properly validat...

9.8CVSS7.3AI score0.00551EPSS
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/24 12:00 a.m.•1 views

CVE-2025-3604: Missing Authorization

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for unauthenticated...

9.8CVSS5.9AI score0.00722EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/04/24 12:00 a.m.•19 views

WordPress plugin Flynax Bridge has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.7AI score0.00551EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/04/23 8:49 p.m.•24 views

WordPress Flynax Bridge plugin <= 2.2.0 - Unauthenticated Privilege Escalation via Account Takeover vulnerability

Unauthenticated Privilege Escalation via Account Takeover vulnerability discovered by kr0d in WordPress Plugin Flynax Bridge versions = 2.2.0...

9.8CVSS8.3AI score0.00722EPSS
SaveExploits1References1Affected Software1
SUSE CVE
SUSE CVE
•added 2025/04/23 2:38 a.m.•10 views

SUSE CVE-2025-22111

In the Linux kernel, the following vulnerability has been resolved: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. SIOCBRDELIF is passed to devioctl first and later forwarded to brioctlcall, which causes unnecessary RTNL dance and the splat below 0 under RTNL pressure. Let's say Thread A...

4.7CVSS7.8AI score0.00205EPSS
SaveExploits0References18
BDU FSTEC
BDU FSTEC
•added 2025/04/23 12:00 a.m.•22 views

Adobe Bridge Buffer Overflow

The vulnerability of the Adobe Bridge file manager is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.6AI score0.00384EPSS
SaveExploits0References3Affected Software1
SUSE CVE
SUSE CVE
•added 2025/04/18 11:20 p.m.•13 views

SUSE CVE-2025-22031

In the Linux kernel, the following vulnerability has been resolved: PCI/bwctrl: Fix NULL pointer dereference on bus number exhaustion When BIOS neglects to assign bus numbers to PCI bridges, the kernel attempts to correct that during PCI device enumeration. If it runs out of bus numbers, no pcibu...

5.5CVSS6.3AI score0.00253EPSS
SaveExploits0References3
CNVD
CNVD
•added 2025/04/18 12:00 a.m.•19 views

Adobe Bridge Buffer Overflow Vulnerability

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a buffer overflow vulnerability, which arises from a failure to properly handle memory allocation during file processing, resulting in a buffer overflow that can be exploited by an attacker to execute...

7.8CVSS7.8AI score0.00384EPSS
SaveExploits0References1
Rows per page
Query Builder