Authentication vulnerability in Frontend Login and Registration Blocks 1.0.7

The Frontend Login and Registration Blocks plugin for WordPress has a security issue that can allow someone to gain unauthorized access to user accounts. This problem affects all versions up to 1.0.7. It happens because the plugin doesn’t check a user’s identity before allowing them to change their password. This means that attackers who are already logged in to the website with at least Subscriber-level access can change anyone’s password, even administrators, and use that to log into their account.