CVE-2025-8059
Published
CVSS v3
9.8
CRITICAL
CVSS v2
N/A
Affected
1
PROJECT
Description
The B Blocks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization and improper input validation within the rgfr_registration() function in all versions up to, and including, 2.0.6. This makes it possible for unauthenticated attackers to create a new account and assign it the administrator role.
<p><strong>bBlocks – Advanced Gutenberg Blocks Plugin to Extend the WordPress Block Editor with Page Builder Features, 60+ Customizable Blocks, Layout Controls, Animations, Sliders, Countdowns, and More</strong></p>
<p><a href="https://bblockswp.com/" rel="nofollow ugc"><strong>bBlocks</strong></a> | <a href="https://bblockswp.com/docs/" rel="nofollow ugc"><strong>Documentation</strong></a> | <a href="https://bblockswp.com/pricing" rel="nofollow ugc"><strong>Pricing</strong></a> | <a href="https://bplugins.com/support/" rel="nofollow ugc"><strong>Support</strong></a> | <a href="https://bblockswp.com/#demos" rel="nofollow ugc"><strong>Demo</strong></a></p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/Ml4UehEwI-s?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<p><a href="https://bblockswp.com/" rel="nofollow ugc"><strong>bBlocks</strong></a> is a lightweight and flexible Gutenberg plugin that transforms the native block editor into a powerful page builder for WordPress. Designed with performance and usability in mind, bBlocks extends the capabilities of core blocks by adding 60+ custom elements, pre-built Gutenberg templates, and flexible layout options—all without the need for bulky third-party tools.</p>
<p>Whether you’re building a landing page, blog layout, portfolio, or full website, bBlocks helps you design faster using customizable blocks, reusable patterns, and layout-ready components. It’s an ideal page builder for Gutenberg users who want more control while keeping their sites fast and efficient.</p>
<h3>Key Features – Free Version</h3>
<ul>
<li>
<p><strong>60+ Custom Blocks</strong>: Enhance your content with blocks for Posts, Sliders, Buttons, Countdowns, Cards, Charts, and more.</p>
</li>
<li>
<p><strong>Advanced Block Customization</strong>: Adjust typography, spacing, color, and visibility. Fine-tune every block to match your brand identity.</p>
</li>
<li>
<p><strong>Pre-Designed Layouts & Themes</strong>: Many blocks include layout presets and Gutenberg templates for faster page creation.</p>
</li>
<li>
<p><strong>Custom Icon Library</strong>: Access a wide range of icons, including Font Awesome and Bootstrap, to personalize your designs.</p>
</li>
<li>
<p><strong>Google Fonts Support</strong>: Use any Google Font directly within the block typography settings.</p>
</li>
<li>
<p><strong>Performance-Optimized</strong>: Minimal CSS and JS ensures faster loading and better compatibility with default blocks and themes.</p>
</li>
<li>
<p><strong>Reusable Patterns</strong>: Combine blocks into reusable patterns for consistent, site-wide layouts.</p>
</li>
</ul>
<h3>Pro Features – Unlock Advanced Block Controls</h3>
<p>Upgrade to <a href="https://bblockswp.com/pricing" rel="nofollow ugc"><strong>bBlocks Pro</strong></a> to supercharge specific blocks with advanced layout settings, styling controls, device visibility options, and interactive enhancements. These premium features are perfect for building more dynamic, flexible, and professional-looking pages using the Gutenberg editor.</p>
<h3>Posts Block</h3>
<p>Enhance your content display with rich layout options and advanced filtering:</p>
<ul>
<li><strong>Layouts & Sub-Layouts</strong>: Unlock more grid, list, and ticker layouts.</li>
<li><strong>Pages as Posts</strong>: Easily display pages alongside posts.</li>
<li><strong>Tag & Custom Taxonomy Filters</strong>: Filter by tags or any custom taxonomy.</li>
<li><strong>Post Offset</strong>: Skip the first N posts—great for creating featured sections.</li>
<li><strong>Include/Exclude by ID</strong>: Show or hide specific posts using their IDs.</li>
<li><strong>Exclude Current Post</strong>: Useful for post templates—avoid duplication.</li>
<li><strong>Custom Pagination</strong>: Add numbered pagination below your post grid.</li>
<li><strong>Element Sorting</strong>: Reorder title, meta, excerpt, and other elements.</li>
<li><strong>Meta Icons & Author Link Toggle</strong>: Use custom icons and control author link visibility.</li>
<li><strong>Taxonomies in Meta</strong>: Display tags or categories inside post meta.</li>
<li><strong>Reading Time</strong>: Auto-display estimated reading time.</li>
<li><strong>Excerpt from Content</strong>: Show an excerpt pulled directly from the content body.</li>
<li><strong>Feature Image Size</strong>: Choose from predefined or custom image sizes.</li>
<li><strong>Ticker Layout Options</strong>: Get more control over ticker animations and styles.</li>
<li><strong>Read More Positioning</strong>: Control the position of the read more link/button.</li>
<li><strong>Shortcode Support</strong>: Use the Posts block anywhere via shortcode.</li>
<li><strong>Query Filter Hook</strong>: Use b_blocks_posts_query for custom query modifications.</li>
</ul>
<h3>Countdown Block</h3>
<p>Create urgency and time-sensitive offers with deeper control:</p>
<ul>
<li><strong>Post-Expiration Display</strong>: Show a custom message or layout after the countdown ends.</li>
<li><strong>Hide at Zero</strong>: Automatically hide the block when the timer ends.</li>
<li><strong>Device Visibility</strong>: Show or hide the countdown on mobile or tablet.</li>
<li><strong>Prefix & Suffix Options</strong>: Add text or a button before/after the timer with custom styling.</li>
<li><strong>Prefix/Suffix Direction</strong>: Define the layout flow (horizontal/vertical).</li>
<li><strong>Individual Box Styling</strong>: Style each countdown unit separately (digit, label, background).</li>
<li><strong>Dismiss Button</strong>: Let users hide the countdown manually.</li>
<li><strong>Extra Patterns</strong>: Access a library of unique countdown layouts.</li>
<li><strong>Shortcode Integration</strong>: Use the countdown anywhere via shortcode.</li>
</ul>
<h3>Slider Block</h3>
<p>Build dynamic carousels with interaction settings and layout enhancements:</p>
<ul>
<li><strong>Slide Border</strong>: Add custom borders around individual slides.</li>
<li><strong>Autoplay Tweaks</strong>: Set delay time, reverse direction, stop on last slide, and more.</li>
<li><strong>Interaction Control</strong>: Pause on mouse enter, disable autoplay on interaction.</li>
<li><strong>Free Mode</strong>: Drag freely between slides with optional sticky behavior.</li>
<li><strong>Slide Effects</strong>: Choose from Cube, Coverflow, Flip, and Card transitions.</li>
<li><strong>Device-Specific Controls</strong>: Show/hide navigation or pagination by device (mobile/tablet).</li>
<li><strong>Keyboard & Mousewheel Navigation</strong>: Control the slider using keyboard arrows or scroll.</li>
<li><strong>Wrapper Styling</strong>: Customize slider background and padding for perfect alignment.</li>
<li><strong>Shortcode Support</strong>: Use sliders anywhere via shortcode.</li>
</ul>
<h3>Image Comparison Block</h3>
<p>Compare before/after visuals with added styling and automation:</p>
<ul>
<li><strong>Label Position</strong>: Position labels above, below, or within the images.</li>
<li><strong>Custom Line Shape & Size</strong>: Make your slider line visually unique and fit your design.</li>
<li><strong>Auto-Slide & Speed</strong>: Enable automatic transitions with speed control.</li>
<li><strong>Hover/Click Move</strong>: Slide on hover or click for interactive experiences.</li>
<li><strong>Stop on Hover</strong>: Pause animation when hovered.</li>
<li><strong>Line & Handler Styling</strong>: Customize color, thickness, and handler appearance.</li>
<li><strong>Icon Color</strong>: Match icons with your site’s theme colors.</li>
</ul>
<h3>Button Block</h3>
<p>Turn simple buttons into multifunctional actions and popups:</p>
<ul>
<li><strong>Link or Popup Actions</strong>: Choose between standard link or popup trigger.</li>
<li><strong>Rel & Referrer Attributes</strong>: Set advanced HTML attributes for privacy and SEO.</li>
<li><strong>Download Custom File Name (experimental)</strong>: Define a name when triggering file downloads.</li>
<li><strong>Icon Positioning</strong>: Display icons to the left or right of button text.</li>
<li><strong>Tooltip Placement</strong>: Show tooltips in various positions.</li>
<li><strong>Device Visibility</strong>: Hide buttons on specific devices (desktop, tablet, mobile).</li>
<li><strong>Popup Content Types</strong>: Display image, video, audio, iframe, block content, or documents (.pdf, .doc, .xlsx).</li>
<li><strong>Popup Security</strong>: Add password protection or login requirement to popups.</li>
</ul>
<h3>Lottie Player Block</h3>
<p>Bring engaging animations to your site with interactive Lottie files:</p>
<ul>
<li><strong>Upload JSON Files</strong>: Upload and manage Lottie animations from the media library.</li>
<li><strong>Hover Animation</strong>: Trigger animations on mouseover.</li>
<li><strong>Animation Modes</strong>: Choose between bounce or normal play.</li>
<li><strong>Direction & Loop Count</strong>: Control play direction and repeat count.</li>
<li><strong>Speed & Interval</strong>: Fine-tune playback speed and autoplay interval.</li>
<li><strong>Open in New Tab</strong>: Add links that open in a new browser tab.</li>
<li><strong>Interactivity Rules</strong>: Define when and where the animation should play.</li>
<li><strong>Caption & Styling</strong>: Add and style a caption with full typography, spacing, and color controls.</li>
</ul>
<p><a href="https://bblockswp.com/pricing" rel="nofollow ugc"><strong>Try the Pro Version</strong></a> – Unlock all premium features today!</p>
<h3>Available Blocks</h3>
<p>bBlocks adds over 60+ custom blocks to your Gutenberg block editor, designed to extend the functionality of core blocks and help you build engaging layouts with ease. Below is a list of all available blocks, each offering intuitive controls and flexible design options:</p>
<ul>
<li>
<p><a href="https://bblockswp.com/blocks/row-columns/" rel="nofollow ugc"><strong>Row Columns</strong></a>: Create responsive multi-column layouts with flexible width, spacing, and alignment options. Ideal for building custom grid structures.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/container/" rel="nofollow ugc"><strong>Container</strong></a>: Group multiple blocks into a single styled section. Add background color, borders, padding, and other visual adjustments.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/section-heading/" rel="nofollow ugc"><strong>Section Heading</strong></a>: Add a styled section title with optional separator and description. Easily toggle the visibility of each element.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/shape-divider/" rel="nofollow ugc"><strong>Shape Divider</strong></a>: Add decorative shape dividers between sections for smooth visual transitions.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/advanced-image/" rel="nofollow ugc"><strong>Advanced Image</strong></a>: Display a custom image or dynamic post featured image with advanced styling options like hover effects, borders, and overlays.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/accordion-block/" rel="nofollow ugc"><strong>Accordion Block</strong></a>: Create collapsible sections with custom titles and content. Perfect for FAQs, accordions, or collapsible content.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/advanced-tabs/" rel="nofollow ugc"><strong>Advanced Tabs</strong></a>: Add multiple tabs with custom titles and content. Perfect for creating tabbed content sections.</p>
</li>
<li>
<p><strong>Breadcrumb</strong>: Add a breadcrumb navigation to your site to help users navigate back to previous pages.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/video/" rel="nofollow ugc"><strong>Video</strong></a>: Embed self-hosted or external video content in a beautifully designed video player with optional poster image and controls.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/gift-image/" rel="nofollow ugc"><strong>GIF Image</strong></a>: Upload and showcase animated GIFs to add dynamic visuals to your content.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/image-gallery/" rel="nofollow ugc"><strong>Image Gallery</strong></a>: Display a collection of images in a stylish, responsive gallery layout. Great for portfolios or product showcases.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/image-comparison/" rel="nofollow ugc"><strong>Image Comparison</strong></a>: Visually compare two images with a draggable slider. Perfect for before/after effects.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/lottie-player/" rel="nofollow ugc"><strong>Lottie Player</strong></a>: Embed lightweight, interactive animations using Lottie JSON files. Supports autoplay, hover triggers, and speed control.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/list/" rel="nofollow ugc"><strong>List</strong></a>: Display a list of items with custom markers, icons, and styles.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/3d-viewer/" rel="nofollow ugc"><strong>3D Viewer</strong></a>: Display 3D model files directly on your page with rotation, zoom, and full interaction support.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/slider/" rel="nofollow ugc"><strong>Slider</strong></a>: Create responsive image or content sliders with pagination, navigation, and animation effects.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/flip-box/" rel="nofollow ugc"><strong>Flip Boxes</strong></a>: Add interactive flip cards with front and back content, ideal for showcasing features or team members with engaging motion.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/carousel/" rel="nofollow ugc"><strong>Carousel</strong></a>: Modern carousel for showcasing content. Supports unlimited slides with complete block flexibility inside.</p>
</li>
<li>
<p><strong>Table</strong>: Create beautiful and professional tables with custom styling and behavior options.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/form/" rel="nofollow ugc"><strong>Form</strong></a>:Create Beautiful and Professional Login and Register Forms.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/countdown/" rel="nofollow ugc"><strong>Countdown</strong></a>: Display a live countdown timer for events, sales, or launches with custom styling and behavior options.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/counters/" rel="nofollow ugc"><strong>Counters</strong></a>: Show animated numeric counters to highlight statistics, milestones, or achievements.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/alert/" rel="nofollow ugc"><strong>Alert</strong></a>: Display styled notification boxes to inform, warn, or alert users. Supports different message types and icons.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/button/" rel="nofollow ugc"><strong>Button</strong></a>: Add multi-functional buttons like go to a link, open a popup with various content types, etc.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/button-group/" rel="nofollow ugc"><strong>Button Group</strong></a>: Place two or more action buttons side by side. Useful for calls-to-action like “Learn More” and “Buy Now”.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/animated-text/" rel="nofollow ugc"><strong>Animated Text</strong></a>: Make text stand out with typing effects, text shuffles, and other animated styles.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/icon-box/" rel="nofollow ugc"><strong>Icon Box</strong></a>: Combine icons with titles and descriptions in customizable layouts. Choose from Font Awesome, Bootstrap, or custom icons.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/feature-boxes/" rel="nofollow ugc"><strong>Feature Boxes</strong></a>: Highlight features or services using an icon/image, title, separator, and supporting text.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/info-box/" rel="nofollow ugc"><strong>Info Box</strong></a>: Share additional information or tips inside a clean, styled content block.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/pricing-table/" rel="nofollow ugc"><strong>Pricing Table</strong></a>: Build pricing plans with features, pricing, and call-to-action buttons, perfect for product or service pages.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/price-lists/" rel="nofollow ugc"><strong>Price Lists</strong></a>: Display menu items or pricing options with images, titles, descriptions, and prices.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/posts/" rel="nofollow ugc"><strong>Posts</strong></a>: Display your latest posts or custom post types in grid or masonry layouts with filtering, pagination, and excerpt controls.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/chart/" rel="nofollow ugc"><strong>Chart</strong></a>: Visualize data using bar, line, or pie charts. Fully responsive and customizable for infographics or analytics.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/qr-code/" rel="nofollow ugc"><strong>QR Code</strong></a>: Generate a QR code from any URL or text input. Useful for offline promotions and instant access links.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/mail-to/" rel="nofollow ugc"><strong>Mail To</strong></a>: Add a one-click email action that opens the user’s mail app (Gmail, Outlook, Yahoo, etc.) prefilled with your address.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/social-share/" rel="nofollow ugc"><strong>Social Share</strong></a>: Enable sharing of your content across social media platforms and messaging apps with styled buttons.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/star-rating/" rel="nofollow ugc"><strong>Star Rating</strong></a>: Display customer reviews or feedback with an interactive star rating block.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/services/" rel="nofollow ugc"><strong>Services</strong></a>: Present your service offerings in a structured layout with icon, title, and description.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/team-member/" rel="nofollow ugc"><strong>Team Members</strong></a>: Introduce your team with member profiles including photo, name, title, bio, and social links.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/cards/" rel="nofollow ugc"><strong>Cards</strong></a>: Create content cards that combine an image, heading, description, and footer, perfect for features or blog highlights.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/bblocks-navigation/" rel="nofollow ugc"><strong>bBlocks Navigation</strong></a>: Add a custom navigation menu inside your page layout for a better user experience and in-page linking.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/facebook-page/" rel="nofollow ugc"><strong>Facebook Page</strong></a>: Display your Facebook page feed in a styled block.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/facebook-embed/" rel="nofollow ugc"><strong>Facebook Embed</strong></a>: Embed any Facebook post or video in your content.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/logo-slider/" rel="nofollow ugc"><strong>Logo Slider</strong></a>: Create a responsive logo slider for your brand or partner logos.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/image-hotspot/" rel="nofollow ugc"><strong>Image Hotspot</strong></a>: Add interactive hotspots to your images with custom tooltips and links.</p>
</li>
<li>
<p><a href="https://bblockswp.com/blocks/content-ticker/" rel="no