Critical · published May 9, 2025
🚨 A sneaky gap in the Frontend Login and Registration Blocks plugin lets attackers impersonate users with just a few clicks! 🔥 Think of it as a restaurant where anyone can change the reservation details of other diners without checking their identity — imagine someone walking in and altering your dinner time to one they prefer! This vulnerability allows unauthenticated attackers to change any user's email address, including administrators. Once they do that, they can easily request a password reset and waltz right into any account — a recipe for chaos that could compromise sensitive information across the board!
Think of it as a restaurant where anyone can change the reservation details of other diners without checking their identity — imagine someone walking in and altering your dinner time to one they prefer! The vulnerability arises from the plugin failing to properly validate a user's identity before allowing updates to their details via the flr_blocks_user_settings_handle_ajax_callback() function. This oversight allows attackers to exploit the system without authentication.
This vulnerability allows unauthenticated attackers to change any user's email address, including administrators. Once they do that, they can easily request a password reset and waltz right into any account — a recipe for chaos that could compromise sensitive information across the board! To secure your site, update the Frontend Login and Registration Blocks plugin immediately to version 1.1.2 or later. Additionally, review user permissions and consider implementing additional verification steps for critical actions. This will ensure that only the rightful user can make changes to account details. You've got this! Follow these steps, and you'll be on your way to securing your WordPress site in no time! 🛡️