Vulnerabilities

TI-2025-03172 CVE-2025-3605 · GHSA-q43x-gh6j-72hr

Frontend Login and Registration Blocks <= 1.1.1 - Unauthenticated Privilege Escalation via Account Takeover

MEDIUM 59

The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07698 Published 2025-05-09 No fix listed CWE-639

TI-2025-03174 CVE-2025-3607 · GHSA-69q5-9q88-37jm

Frontend Login and Registration Blocks <= 1.0.8 - Authenticated (Subscriber+) Privilege Escalation via Password Reset

MEDIUM 40

The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.8.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00452 Published 2025-04-24 No fix listed CWE-620

Vulnerabilities

Filters

Frontend Login and Registration Blocks <= 1.1.1 - Unauthenticated Privilege Escalation via Account Takeover

Frontend Login and Registration Blocks <= 1.0.8 - Authenticated (Subscriber+) Privilege Escalation via Password Reset