Approved changes feed: RSS · Atom

cpe:2.3:a:bplugins:b_blocks_–_the_ultimate_block_collection:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBplugins (d23d5d08-ee04-5724-85c5-d147aa9863c7)
ProductB Blocks – The Ultimate Block Collection (4e847714-92d4-5461-851d-9d47201267cf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8059 vulnerable 2026-06-08 07:45:18.775918 B Blocks <= 2.0.6 - Missing Authorization to Unauthenticated Privilege Escalation via rgfr_registration Function
CRITICAL (9.8)
The B Blocks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization and improper input validation within the rgfr_registration() function in all versions up to, and including, 2.0.6. This makes it possible for unauthenticated attackers to create a new account and assign it the administrator role.
Published: 2025-08-12T04:25:40.466Z
Updated: 2026-04-08T16:35:34.334Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.