1. Home
  2. CVE Database
  3. CVE-2025-4179
HIGH · 7.3

CVE-2025-4179

The Flynax Bridge plugin for WordPress is vulnerable to limited Privilege Escalation due to a missing capability check on the registerUser() function in all versions up to, and including, 2.2.0. This ...

Vulnerability Description

The Flynax Bridge plugin for WordPress is vulnerable to limited Privilege Escalation due to a missing capability check on the registerUser() function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to register new user accounts as authors.

CVSS Score

7.3

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
FlynaxFlynax Bridge<= 2.2.0

Related Weaknesses (CWE)

CWE-862

References

FAQ

What is CVE-2025-4179?

CVE-2025-4179 is a vulnerability with a CVSS score of 7.3 (HIGH). The Flynax Bridge plugin for WordPress is vulnerable to limited Privilege Escalation due to a missing capability check on the registerUser() function in all versions up to, and including, 2.2.0. This ...

How severe is CVE-2025-4179?

CVE-2025-4179 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-4179?

Check the references section above for vendor advisories and patch information. Affected products include: Flynax Flynax Bridge.