Skip to content
OpenAdvisories

Vendor

arkenon

2 known vulnerabilities.

Products

Login, Registration and Lost Password Blocks 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-3607

    Frontend Login and Registration Blocks <= 1.0.8 - Authenticated (Subscriber+) Privilege Escalation via Password Reset

    The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.8. This is due to the plugin not properly validating a user's identity prior to updating a pas…

    arkenon Login, Registration and Lost Password Blocks Web / CMS