cbcvebase.

Cmssuperheroes Flex Store Users vulnerabilities

1 known vulnerability affecting cmssuperheroes/flex_store_users.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-13619P2CRITICALCVSS 9.8≤ 1.1.02025-12-20
CVE-2025-13619 [CRITICAL] CWE-269 CVE-2025-13619: The Flex Store Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up t The Flex Store Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.0. This is due to the 'fsUserHandle::signup' and the 'fsSellerRole::add_role_seller' functions not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'admini
nvd
Cmssuperheroes Flex Store Users vulnerabilities | cvebase