WordPress Flynax Bridge plugin <= 2.2.0 - Unauthenticated Privilege Escalation via Password Update vulnerability

Unauthenticated Privilege Escalation via Password Update vulnerability discovered by kr0d in WordPress Plugin Flynax Bridge versions = 2.2.0...

CVE-2025-3603

creationtimestamp| type| source ---|---|--- 2025-04-24 09:12:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13196 2025-04-24 10:15:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnkhz7tpmw24 2025-04-24 11:48:22+00:00| seen|...

CVE-2025-3603

CVE-2025-3603 (Flynax Bridge, WordPress) is an unauthenticated privilege-escalation flaw in the Flynax Bridge plugin, affecting versions up to and including 2.2.0. The root cause is improper validation of a user’s identity before updating user details (e.g., passwords), enabling an unauthenticate...