Privilege Escalation Vulnerability in Flynax Bridge Plugin for WordPress

CVE-2025-4179

What is CVE-2025-4179?

The Flynax Bridge plugin for WordPress is susceptible to a vulnerability that allows privilege escalation through a flaw in its registerUser() function. This issue arises from the lack of necessary capability checks, enabling unauthenticated attackers to create new user accounts with author privileges, potentially compromising the overall security of the WordPress site. Site owners using versions up to and including 2.2.0 are urged to update their plugin immediately to mitigate this risk.

References