The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.
#ARTICLE

Explore the Forum’s latest opinion articles, timely analyses and explainers from leaders in business, politics, and civil society.

MakeUseOf was founded in 2006 and acquired and owned by Valnet Inc. since 2020., MUO is one of the largest online technology publications that millions of readers every turn to every month for expert tech guidance. We also have hundreds of thousands of fans across social media on Instagram, Facebook, X (Twitter), and Pinterest.

Government Technology has IT articles for state, local and city government. Find government news and events.

Security - Free source code and tutorials for Software developers and Architects."