CVE-2026-57386

HighCVSS 8.8

Published: 13/07/2026(UTC)Updated: 13/07/2026(UTC)Translated: 14/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

34th percentile - higher than 34% of all known CVEs

Summary

The aBlocks WordPress plugin contains an incorrect privilege assignment vulnerability that allows privilege escalation. This issue affects plugin versions from n/a through 2.9.1.

Risk Assessment

An attacker can exploit this vulnerability to gain elevated privileges within the system, potentially leading to full control over the WordPress site and access to sensitive data.

Recommendation

Immediately update the aBlocks plugin to version 2.9.2 or later, which includes a fix for this vulnerability.

Other vulnerabilities in aBlocks

CVE-2026-40804High
Reflected Cross-site Scripting (XSS) vulnerability in the aBlocks plugin by Kodezen LLC. Improper input neutralization during web page generation allows an attacker to inject malicious scripts.

Original NVD description (English source)

Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalation.This issue affects aBlocks: from n/a through < 2.9.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS