MEDIUM🇵🇱 Wersja polska

CVE-2025-4177

CVSS 5.3v3.1pub. 2025-05-02upd. 2026-04-08

The Flynax Bridge plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deleteUser() function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to delete arbitrary users.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

  • Flynax Bridge

    APP
    Flynax
    ≤ 2.2.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2025-3603CRITICAL9.8PL ✓ten sam produkt

Flynax Bridge dla WordPress — privilege escalation przez przejęcie konta

CVE-2025-3604CRITICAL9.8PL ✓ten sam produkt

Flynax Bridge dla WordPress — przejęcie konta przez zmianę adresu e-mail

CVE-2025-4179HIGH7.3ten sam produkt

The Flynax Bridge plugin for WordPress is vulnerable to limited Privilege Escalation due to a missing capabili...