The vulnerability allows a user with contributor privileges to elevate their own access level within WordPress by exploiting a flaw in the B Blocks plugin up to version 2.0.31. This is an access‑control weakness (CWE‑266) that can let a contributor gain higher privileges than intended.

WordPress sites running the B Blocks plugin from bPlugins on any version 2.0.31 or older are affected. No other products or vendors are listed.

The CVSS score of 8.8 highlights a high severity impact. An EPSS score of less than 1% suggests a low current exploitation probability, and the flaw is not yet listed in the CISA KEV catalog. Based on the description, it is inferred that the likely attack vector requires legitimate contributor access within WordPress to trigger the plugin’s privilege‑adjustment logic, allowing the attacker to elevate privileges and potentially compromise site integrity and availability.