The aBlocks WordPress plugin fails to validate user input within the /ablocks/v1/form-builder/registration REST endpoint, allowing authenticated users with Contributor access to escalate privileges to Editor.
PoC
aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder
wordpress
privilege-escalation
web-application
1t
1c