CVE-2025-4179 is a missing authorization vulnerability (CWE-862) in the Flynax Bridge WordPress plugin by v1rustyle. The registerUser() function lacks a capability check, enabling unauthenticated attackers to create new user accounts with author privileges. This vulnerability affects all versions up to 2.2.0 and has a CVSS 3.1 base score of 7.3, indicating high severity. No patch or remediation details have been provided by the vendor yet. The vulnerability allows limited privilege escalation but does not require user interaction or prior privileges.

An attacker can register new user accounts as authors without authentication, potentially allowing unauthorized content creation or modification. This results in limited privilege escalation affecting confidentiality, integrity, and availability at a low level. There are no known exploits in the wild, and the impact is constrained to the WordPress environment where the plugin is installed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, restrict access to the WordPress installation and monitor for unauthorized account creation. Avoid using the vulnerable plugin version if possible. Apply updates promptly once the vendor provides an official fix.