CVE Daily

CVE-2025-8059

The B Blocks plugin for WordPress is vulnerable to Privilege Escalation due to m...

Critical CVSS 9.8

Overview

The B Blocks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization and improper input validation within the rgfr_registration() function in all versions up to, and including, 2.0.6. This makes it possible for unauthenticated attackers to create a new account and assign it the administrator role.

CWE: CWE-862 Published: 2025-08-12T05:15:32.487
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.8 (CRITICAL)
  • Detected tags: misconfiguration, priv_esc, wordpress (tag impact: HIGH)

Recommended actions:

  • Fix privilege escalation urgently.
  • Enforce least-privilege and strengthen EDR detection.

Recommended tools

Tags