CVE-2026-57386

HighCVSS 8.8

Published: 13/07/2026(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

36th percentile - higher than 36% of all known CVEs

Summary

The aBlocks plugin by Kodezen LLC contains an Incorrect Privilege Assignment vulnerability that allows Privilege Escalation. The issue affects versions before 2.9.1.

Risk Assessment

Privilege escalation may allow low-privileged users to gain control beyond their intended role. This can lead to unauthorized changes on the WordPress site.

Recommendation

Update the aBlocks plugin to version 2.9.1 or later. Review user accounts and roles for unauthorized privilege changes.

Other vulnerabilities in aBlocks

CVE-2026-40804High
Reflected Cross-site Scripting (XSS) vulnerability in the aBlocks plugin by Kodezen LLC. Improper input neutralization during web page generation allows an attacker to inject malicious scripts.

Original NVD description (English source)

Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalation.This issue affects aBlocks: from n/a before 2.9.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS