Skip to content
OpenAdvisories

Product · CMSSuperHeroes

Flex Store Users

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-13619

    Flex Store Users <= 1.1.0 - Unauthenticated Privilege Escalation

    The Flex Store Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.0. This is due to the 'fsUserHandle::signup' and the 'fsSellerRole::add_role_seller' functions not restricting what user roles a user can…

    CMSSuperHeroes Flex Store Users Web / CMS