Flynax Bridge
Flynax Bridge has 4 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 4 are fixed as of September 2026. Their average CVSS score is 8.1, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 1 high. 2025 was the busiest year with 4 disclosures.
The most common weakness is Missing Authorization, behind 3 of the records (75%). Other recurring categories include Unverified Password Change.
Every one of the 4 issues recorded for Flynax Bridge has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by kr0d. Flynax Bridge is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-3604Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Account Takeover
Read the full analysisVulnerability Records
Flynax Bridge
Author
v1rustyle
The WordPress plugin is intended to connect Flynax powered classifieds site with a WordPress blog. Once the websites have been synced successfully, a new Flynax widget will be added to admin panel of a WordPress powered site, which you can choose to position in any part of your blog. The widget enables you to configure the number of ads displayed as well as group them according to ‘featured’ or ‘simple’. Similarly, WordPress latest post widget will be added to your Flynax powered site which will mirror latest posts from your blog. You are free to choose the position of the box wherever it is most appropriate to your site design. Key Features: Accounts synchronization between your WordPress Blog and Flynax Classifieds Website; New widget in your admin panel allows you to create boxes with Featured or Recently added ads on your blog pages; Sends the latest posts to your Flynax website to show it in the box there
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C