PT-2025-20486 · WordPress · Frontend Login/Registration Blocks

Kenneth Dunn · Published 2025-05-09 · Updated 2025-05-09 · CVE-2025-3605

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Frontend Login and Registration Blocks plugin for WordPress versions 1.0.0 through 1.0.7

Description The issue is related to privilege escalation via account takeover. This occurs because the plugin does not properly validate a user's identity before updating their details, such as email, via the flr blocks user settings handle ajax callback() function. As a result, unauthenticated attackers can change arbitrary users' email addresses, including those of administrators, and use this to reset the user's password and gain access to their account.

Recommendations For versions 1.0.0 through 1.0.7, update to a version later than 1.0.7 to resolve the issue. As a temporary workaround, consider disabling the flr blocks user settings handle ajax callback() function until a patch is available.

Exploit

Fix

LPE

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-3605

Affected Products

Frontend Login/Registration Blocks

References · 10

• 🔥 https://exploit-db.com/exploits/52291 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-3605 · Security Note
• https://t.me/cvedetector/24925 · Telegram Post
• https://t.me/cvetracker/23467 · Telegram Post
• https://twitter.com/cybercronai/status/1920840028004958642 · Twitter Post
• https://twitter.com/CVEnew/status/1920739447412240492 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1920769318402302187 · Twitter Post
• https://twitter.com/cybercronai/status/1920870228864417794 · Twitter Post
• https://plugins.trac.wordpress.org/browser/frontend-login-and-registration-blocks/trunk/inc/class-flr-blocks-user-settings.php#L59 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/0c11668c-6dc3-4539-b2be-bf6528bed73e?source=cve · Note