Login, Registration and Lost Password Blocks
Login, Registration and Lost Password Blocks has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 9.3, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2025 was the busiest year with 2 disclosures.
The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (50%). Other recurring categories include Unverified Password Change.
Every one of the 2 issues recorded for Login, Registration and Lost Password Blocks has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by kr0d. Login, Registration and Lost Password Blocks is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2025-3605Frontend Login and Registration Blocks <= 1.1.1 - Unauthenticated Privilege Escalation via Account Takeover
Read the full analysisVulnerability Records
Login, Registration and Lost Password Blocks
Author
Kadim Gültekin
Login, Registration and Lost Password Blocks plugin provides blocks helps you to add login, register, lost password forms from front end. Additionally, you can create user settings page, add limit login attempts and user activation functionality and more to your website… Why Choose Frontend Login and Registration Forms 1. Easy to Use You can add login, register, lost password or user settings with just a one click. They are all blocks! 2. Customization Each block has color, font and size option in the right sidebar of block editor. You can easily customize your forms. ☑ Login Form Block ☑ Register Form Block ☑ Lost Password Form Block ☑ User Settings Form Block ☑ User Activation Form Block ☑ Welcome Card Block ☑ Menu Item Block (Login/Logout) ☑ Limit Login Attempts ☑ Limit Reset Request Attempts ☑ E-Mail Settings ☑ Strength Password ☑ Username Validation ☑ Customizable Form Fields ☑ Customizable Colors Note: Please read the guide before using the plugin. ☑ Documentation ☑ Official Web Site Compatibility Block Editor Site Editor
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C