Skip to content
OpenAdvisories

Product · bdthemes

ZoloBlocks

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-124421

    WordPress ZoloBlocks plugin <= 2.8.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in BdThemes ZoloBlocks zoloblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ZoloBlocks: from n/a through 2.8.2.

    bdthemes ZoloBlocks
  • Medium 5.3
    CVE-2025-49903

    WordPress ZoloBlocks plugin <= 2.3.11 - Broken Access Control vulnerability

    Missing Authorization vulnerability in bdthemes ZoloBlocks zoloblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ZoloBlocks: from n/a through <= 2.3.11.

    bdthemes ZoloBlocks
  • Medium 5.4
    CVE-2025-60161

    WordPress ZoloBlocks Plugin <= 2.3.11 - Server Side Request Forgery (SSRF) Vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in bdthemes ZoloBlocks zoloblocks allows Server Side Request Forgery.This issue affects ZoloBlocks: from n/a through <= 2.3.11.

    bdthemes ZoloBlocks
  • Medium 6.5
    CVE-2025-58230

    WordPress ZoloBlocks plugin <= 2.3.12 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bdthemes ZoloBlocks zoloblocks allows DOM-Based XSS.This issue affects ZoloBlocks: from n/a through <= 2.3.12.

    bdthemes ZoloBlocks