https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 00:34:50 +0000 https://cve.radiocsirt.org/vuln/cve-2025-13619 <p><strong>Affected:</strong> CMSSuperHeroes Flex Store Users</p> <p>The Flex Store Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.0. This is due to the &#39;fsUserHandle::signup&#39; and the &#39;fsSellerRole::add_role_seller&#39; functions not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the &#39;administrator&#39; role during registration and gain administrator access to the site. Note: The vulnerability can be exploited with the &#39;fs_type&#39; parameter if the Flex Store Seller plugin is also activated.</p> <p><strong>Affected:</strong> CMSSuperHeroes Flex Store Users</p> <p>The Flex Store Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.0. This is due to the &#39;fsUserHandle::signup&#39; and the &#39;fsSellerRole::add_role_seller&#39; functions not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the &#39;administrator&#39; role during registration and gain administrator access to the site. Note: The vulnerability can be exploited with the &#39;fs_type&#39; parameter if the Flex Store Seller plugin is also activated.</p> https://cve.radiocsirt.org/vuln/cve-2025-13619