CVE-2026-110018 | kodezen aBlocks Plugin up to 2.17.0 on WordPress Form Builder registration register roleSlug privileges management

SecurityVulns

A vulnerability classified as critical was found in kodezen aBlocks Plugin up to 2.17.0 on WordPress. This affects the function register of the file /ablocks/v1/form-builder/registration of the component Form Builder. Such manipulation of the argument roleSlug leads to improper privilege management.

This vulnerability is traded as CVE-2026-110018. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More