Critical severity9.8NVD Advisory· Published Aug 12, 2025· Updated Apr 15, 2026
CVE-2025-8059
CVE-2025-8059
Description
The B Blocks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization and improper input validation within the rgfr_registration() function in all versions up to, and including, 2.0.6. This makes it possible for unauthenticated attackers to create a new account and assign it the administrator role.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=2.0.6
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.