CVE-2025-3607

HIGH

Frontend Login & Registration Blocks <1.0.7 - Privilege Escalation

Title source: llm

Description

The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.8. This is due to the plugin not properly validating a user's identity prior to updating a password. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.

References (4)

https://plugins.trac.wordpress.org/changeset/3325911/#file35

https://plugins.trac.wordpress.org/changeset/3325911/#file10

[Product] https://plugins.trac.wordpress.org/browser/frontend-login-and-registration-blocks/trunk/inc/class-flr-blocks-lost-password.php#L115

[Third Party Advisory] https://www.wordfence.com/threat-intel/vulnerabilities/id/b06ce1e4-5cfb-415d-ad09-db194d6b4354?source=cve

Scores

CVSS v3 8.8

EPSS 0.0033

EPSS Percentile 56.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-620

Status published

Products (2)

arkenon/Frontend Login and Registration Blocks < 1.0.7

arkenon/Login, Registration and Lost Password Blocks < 1.0.8

Published Apr 24, 2025

Tracked Since Feb 18, 2026