Exploit for Missing Authorization in Flynax Flynax_Bridge

🚨 Flynax Bridge CVE: CVE-2025-3604 CVSS: 9.8 Cri...

CVE-2025-3604

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for unauthenticated...

CVE-2025-3604

creationtimestamp| type| source ---|---|--- 2025-04-24 09:12:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13205 2025-04-24 10:15:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnkhz7caij2t 2025-04-24 11:48:22+00:00| seen|...

CVE-2025-3604 Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Account Takeover

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for unauthenticated...

WordPress Flynax Bridge plugin <= 2.2.0 - Unauthenticated Privilege Escalation via Account Takeover vulnerability

Unauthenticated Privilege Escalation via Account Takeover vulnerability discovered by kr0d in WordPress Plugin Flynax Bridge versions = 2.2.0...