Skip to content
Threat Feed
Subscribe

Product

ABlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder (<= 2.17.0)

1 brief RSS
high advisory

aBlocks: WordPress Plugin Privilege Escalation (CVE-2026-110018)

The aBlocks WordPress plugin fails to validate user input within the /ablocks/v1/form-builder/registration REST endpoint, allowing authenticated users with Contributor access to escalate privileges to Editor.

PoC aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder wordpress privilege-escalation web-application
1t 1c