WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation

Privilege escalation vulnerability exists in the Frontend Login and Registration Blocks plugin for WordPress versions = 1.0.7. An unauthenticated attacker can exploit the AJAX endpoint flrblocksusersettingshandleajaxcallback to change the administrator's email address. Subsequently, the attacker...

CVE-2025-3605

🚀 CVE-2025-3605 漏洞利用指南 🛡️ 漏洞摘要 WordPress 的 Frontend Login and Registration Blocks 插件（版本 = 1.0.7）存在通过账户接管实现权限提升 的漏洞。 问题在于该插件在通过 flrblocksusersettingshandleajaxcallback 函数更新电子邮件等敏感信息时，未验证用户身份 。 ✅ 影响： 未经认证的攻击者可以更改管理员的电子邮件地址，触发"忘记密码"流程，并重置管理员密码，从而获得完全控制权。 💥 概念验证（PoC） 随附的 Python 脚本通过针对易受攻击的 AJAX...

📄 WordPress Frontend Login and Registration Blocks 1.0.7 Privilege Escalation

WordPress Frontend Login and Registration Blocks plugin versions 1.0.7 and below suffer from a privilege escalation vulnerability. Exploit Title: WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation Google Dork:...

WordPress Frontend Login and Registration Blocks 1.0.7 Privilege Escalation

WordPress Frontend Login and Registration Blocks plugin versions 1.0.7 and below are vulnerable to privilege escalation via account takeover. An unauthenticated attacker can change the administrator's email, trigger the Forgot Password process, and reset the admin password, gaining full control...