https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 18:36:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-286846 EUVD-2026-286846 https://cve.radiocsirt.org/vuln/euvd-2026-286846 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13619 <p>The Flex Store Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.0. This is due to the &#39;fsUserHandle::signup&#39; and the &#39;fsSellerRole::add_role_seller&#39; functions not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the &#39;administrator&#39; role during registration and gain administrator access to the site. Note: The vulnerability can be exploited with the &#39;fs_type&#39; parameter if the Flex Store Seller plugin is also activated.</p> <p>The Flex Store Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.0. This is due to the &#39;fsUserHandle::signup&#39; and the &#39;fsSellerRole::add_role_seller&#39; functions not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the &#39;administrator&#39; role during registration and gain administrator access to the site. Note: The vulnerability can be exploited with the &#39;fs_type&#39; parameter if the Flex Store Seller plugin is also activated.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-13619 https://cve.radiocsirt.org/vuln/ghsa-p5j5-69wq-jfpm <p>The Flex Store Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.0. This is due to the &#39;fsUserHandle::signup&#39; and the &#39;fsSellerRole::add_role_seller&#39; functions not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the &#39;administrator&#39; role during registration and gain administrator access to the site. Note: The vulnerability can be exploited with the &#39;fs_type&#39; parameter if the Flex Store Seller plugin is also activated.</p> <p>The Flex Store Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.0. This is due to the &#39;fsUserHandle::signup&#39; and the &#39;fsSellerRole::add_role_seller&#39; functions not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the &#39;administrator&#39; role during registration and gain administrator access to the site. Note: The vulnerability can be exploited with the &#39;fs_type&#39; parameter if the Flex Store Seller plugin is also activated.</p> https://cve.radiocsirt.org/vuln/ghsa-p5j5-69wq-jfpm