CVE-2025-3605
CRITICAL EXPLOITED NUCLEIFrontend Login & Registration Blocks <1.0.7 - Privilege Escalation
Title source: llmExploitation Summary
CVE-2025-3605 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 4 public exploits from researchers including Md Shoriful Islam, Nxploited, GadaLuBau1337. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit targets a privilege escalation vulnerability in the WordPress Frontend Login and Registration Blocks plugin (CVE-2025-3605). It allows an attacker to change the email address of a target user (default: admin) by sending a crafted POST request to admin-ajax.php, enabling password reset via the new email.
Description
The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.1. This is due to the plugin not properly validating a user's identity prior to updating their details like email via the flr_blocks_user_settings_handle_ajax_callback() function. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.
Exploits (4)
This exploit targets a privilege escalation vulnerability in the WordPress Frontend Login and Registration Blocks plugin (CVE-2025-3605). It allows an attacker to change the email address of a target user (default: admin) by sending a crafted POST request to admin-ajax.php, enabling password reset via the new email.
This is a functional exploit for CVE-2025-3605, targeting a privilege escalation vulnerability in the Frontend Login and Registration Blocks WordPress plugin. It allows unauthenticated attackers to change the administrator's email via an AJAX endpoint, enabling password reset and account takeover.
This repository contains a functional Python exploit for CVE-2025-3605, targeting a privilege escalation vulnerability in the Frontend Login and Registration Blocks WordPress plugin (versions <= 1.0.7). The exploit allows unauthenticated attackers to change the administrator's email via an insecure AJAX endpoint, enabling password reset and account takeover.
The repository contains functional exploit code for CVE-2025-3605, targeting a WordPress plugin (3DPrint Lite 1.9.1.4) with an arbitrary file upload vulnerability. The Python script demonstrates the ability to upload a malicious file to a vulnerable target.
Nuclei Templates (1)
body="/wp-content/plugins/frontend-login-and-registration-blocks/"
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H