Lucene search
+L

51 matches found

CNNVD
CNNVD
added 2025/05/02 12:00 a.m.11 views

WordPress plugin Flynax Bridge 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.2AI score0.00349EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/05/02 12:00 a.m.11 views

PT-2025-18744 · WordPress · Flynax Bridge

Name of the Vulnerable Software and Affected Versions: Flynax Bridge plugin for WordPress versions up to, and including, 2.2.0 Description: The issue is related to a missing capability check on the deleteUser function, allowing unauthorized loss of data. This makes it possible for unauthenticated...

5.3CVSS6.1AI score0.00349EPSS
SaveExploits0References7
Patchstack
Patchstack
added 2025/05/01 9:38 p.m.13 views

WordPress Flynax Bridge plugin <= 2.2.0 - Unauthenticated Arbitrary User Deletion vulnerability

Unauthenticated Arbitrary User Deletion vulnerability discovered by kr0d in WordPress Plugin Flynax Bridge versions = 2.2.0...

5.3CVSS8.9AI score0.00349EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/05/01 12:00 a.m.9 views

WordPress plugin Flynax Bridge 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.3CVSS7.6AI score0.00352EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/04/26 9:05 a.m.16 views

CVE-2025-3603

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like password. This makes it possible for...

9.8CVSS7.5AI score0.00528EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/26 9:02 a.m.32 views

CVE-2025-3604

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for unauthenticated...

9.8CVSS7.6AI score0.00692EPSS
SaveExploits1References1
Patchstack
Patchstack
added 2025/04/24 1:03 p.m.10 views

WordPress Flynax Bridge plugin <= 2.2.0 - Unauthenticated Privilege Escalation via Password Update vulnerability

Unauthenticated Privilege Escalation via Password Update vulnerability discovered by kr0d in WordPress Plugin Flynax Bridge versions = 2.2.0...

9.8CVSS8.3AI score0.00528EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/04/24 9:15 a.m.6 views

CVE-2025-3603

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like password. This makes it possible for...

9.8CVSS7.4AI score0.00528EPSS
SaveExploits0References2
NVD
NVD
added 2025/04/24 9:15 a.m.27 views

CVE-2025-3604

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for unauthenticated...

9.8CVSS0.00692EPSS
SaveExploits1References3
OSV
OSV
added 2025/04/24 9:15 a.m.15 views

CVE-2025-3604

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for unauthenticated...

9.8CVSS5.9AI score0.00692EPSS
SaveExploits1References2
NVD
NVD
added 2025/04/24 9:15 a.m.19 views

CVE-2025-3603

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like password. This makes it possible for...

9.8CVSS0.00528EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/04/24 8:23 a.m.6 views

CVE-2025-3603 Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Password Update

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like password. This makes it possible for...

9.8CVSS7.5AI score0.00528EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/04/24 8:23 a.m.54 views

CVE-2025-3603 Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Password Update

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like password. This makes it possible for...

9.8CVSS0.00528EPSS
SaveExploits0References3
CVE
CVE
added 2025/04/24 8:23 a.m.80 views

CVE-2025-3603

CVE-2025-3603 (Flynax Bridge, WordPress) is an unauthenticated privilege-escalation flaw in the Flynax Bridge plugin, affecting versions up to and including 2.2.0. The root cause is improper validation of a user’s identity before updating user details (e.g., passwords), enabling an unauthenticate...

9.8CVSS9.8AI score0.00528EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/24 8:23 a.m.13 views

CVE-2025-3604 Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Account Takeover

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for unauthenticated...

9.8CVSS7.5AI score0.00692EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/04/24 8:23 a.m.50 views

CVE-2025-3604 Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Account Takeover

The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for unauthenticated...

9.8CVSS0.00692EPSS
SaveExploits1References3
CVE
CVE
added 2025/04/24 8:23 a.m.99 views

CVE-2025-3604

CVE-2025-3604 affects the WordPress plugin Flynax Bridge (versions up to and including 2.2.0). The issue is unauthenticated privilege escalation via account takeover caused by insufficient validation of a user’s identity before updating details like email, enabling an attacker to change arbitrary...

9.8CVSS9.8AI score0.00692EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2025/04/24 12:00 a.m.14 views

WordPress plugin Flynax Bridge 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.7AI score0.00692EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/04/24 12:00 a.m.10 views

WordPress plugin Flynax Bridge 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.7AI score0.00528EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/24 12:00 a.m.16 views

PT-2025-17716

Name of the Vulnerable Software and Affected Versions Flynax Bridge plugin for WordPress versions up to and including 2.2.0 Description The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover. This issue arises because the plugin does not properly validat...

9.8CVSS7.3AI score0.00528EPSS
SaveExploits0References16
Rows per page
Query Builder