{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aablocksablockswordpress/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ablocks:ablocks:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-110018"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=CVE-2026-110018\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":["aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder \u0026 Animation Builder (\u003c= 2.17.0)"],"_cs_severities":["high"],"_cs_tags":["wordpress","privilege-escalation","web-application"],"_cs_type":"advisory","_cs_vendors":["aBlocks"],"content_html":"\u003cp\u003eThe aBlocks - Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder \u0026amp; Animation Builder plugin for WordPress is vulnerable to a privilege escalation vulnerability (CVE-2026-110018) in versions up to and including 2.17.0. The vulnerability arises from an improperly configured REST API permission callback in the \u003ccode\u003e/ablocks/v1/form-builder/registration\u003c/code\u003e endpoint.\u003c/p\u003e\n\u003cp\u003eThe plugin allows an attacker with Contributor-level access to manipulate the \u003ccode\u003eroleSlug\u003c/code\u003e attribute. By saving a block with \u003ccode\u003eformType='login'\u003c/code\u003e and subsequently triggering the registration endpoint, the attacker can bypass validation checks that only occur during the save process. The vulnerability is mitigated for administrator-level roles by an \u003ccode\u003eis_safe_registration_role()\u003c/code\u003e function that rejects roles with critical management capabilities, limiting escalation to the Editor role or lower.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated user with at least Contributor-level access to escalate their account privileges to Editor. This provides the attacker with elevated access to site content and administrative capabilities associated with the Editor role.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the \u0026quot;aBlocks - Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder \u0026amp; Animation Builder\u0026quot; plugin to a version released after 2.17.0.\u003c/li\u003e\n\u003cli\u003eAudit existing user accounts for unexpected elevation to Editor or other high-privilege roles.\u003c/li\u003e\n\u003cli\u003eReview WordPress REST API logs for anomalous requests to the \u003ccode\u003e/ablocks/v1/form-builder/registration\u003c/code\u003e endpoint, particularly from users with Contributor-level roles.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-24T15:14:59Z","date_published":"2026-10-24T14:16:08Z","id":"https://feed.craftedsignal.io/briefs/2026-10-ablocks-privilege-escalation/","summary":"The aBlocks WordPress plugin fails to validate user input within the /ablocks/v1/form-builder/registration REST endpoint, allowing authenticated users with Contributor access to escalate privileges to Editor.","title":"aBlocks: WordPress Plugin Privilege Escalation (CVE-2026-110018)","url":"https://feed.craftedsignal.io/briefs/2026-10-ablocks-privilege-escalation/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:ablocks:ablocks:*:*:*:*:*:wordpress:*:*","version":"https://jsonfeed.org/version/1.1"}