Privilege Escalation Vulnerability in Flynax Bridge Plugin for WordPress

CVE-2025-3603

What is CVE-2025-3603?

The Flynax Bridge plugin for WordPress has a vulnerability that allows unauthenticated attackers to escalate privileges through account takeover. This issue arises from insufficient validation of user identity when updating account details, including passwords. As a result, attackers can change passwords for any user, including administrators, thereby gaining unauthorized access to accounts. All versions up to and including 2.2.0 are affected, emphasizing the importance of timely updates and enhanced security measures to protect user accounts.

References