CVE-2026-57386High· 8.8▾ TwilightIncorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalation.This issue affects aBlocks: from n/a before 2.9.1.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.4%
Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalation.This issue affects aBlocks: from n/a before 2.9.1.
ablocks < 2.9.1Update the WordPress aBlocks plugin to the latest available version (at least 2.9.1).
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-40804High· 7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kodezen LLC aBlocks ablocks allows Reflected XSS.This issue affects aBlocks: from n/a through 2.16.0.
CVE-2026-116223Medium· 6.5icret EasyImage del.php privileges management
CVE-2026-116106High· 7.3HeyCyan App FileProvider access control
CVE-2026-116108Medium· 4.3openbq-org OpenBB Local API Server api_settings.py access control
CVE-2026-112242High· 8.8WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerability
CVE-2026-114361Medium· 5.6HarnessRouter Identity Mode app.py improper authorization