Privilege Escalation Vulnerability in Frontend Login and Registration Blocks for WordPress

CVE-2025-3607

What is CVE-2025-3607?

The Frontend Login and Registration Blocks plugin for WordPress contains a vulnerability that permits authenticated attackers with Subscriber-level access or higher to escalate their privileges. The flaw arises from inadequate validation of user identity during password updates, allowing them to change the passwords of arbitrary users, including administrators. This exposes the affected accounts to unauthorized access, potentially compromising the security of sites utilizing this plugin.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References