B Blocks WordPress Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the B Blocks plugin for WordPress, affecting all versions through 2.0.6. The issue arises from missing authorization and inadequate input validation in the rgfr_registration() function, allowing unauthenticated attackers to create accounts with administrator privileges.

Impact

Exploitation of this vulnerability allows unauthenticated users to create accounts with administrative rights on the WordPress site.

Remediation

Users are advised to update the B Blocks plugin to version 2.0.7 or later, where this vulnerability has been patched.