Advisories · Technology

BdThemes ZoloBlocks.

Every CVE that names BdThemes ZoloBlocks among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-124421 CVE record

CVSS 5.3 Medium

WordPress ZoloBlocks plugin <= 2.8.2 - Broken Access Control vulnerability
- BdThemes ZoloBlocks
- Broken access control
Not analysed yet 11 Nov 2026
CVE-2025-49903 CVE record

CVSS 5.3 Medium

WordPress ZoloBlocks plugin <= 2.3.11 - Broken Access Control vulnerability
- bdthemes ZoloBlocks
- Broken access control
Not analysed yet 22 Oct 2025
CVE-2025-60161 CVE record

CVSS 5.4 Medium

WordPress ZoloBlocks Plugin <= 2.3.11 - Server Side Request Forgery (SSRF) Vulnerability
- bdthemes ZoloBlocks
- Server-side request forgery (SSRF)
Not analysed yet 26 Sept 2025
CVE-2025-58230 CVE record

CVSS 6.5 Medium

WordPress ZoloBlocks plugin <= 2.3.12 - Cross Site Scripting (XSS) vulnerability
- bdthemes ZoloBlocks
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2025
CVE-2025-53210 CVE record

CVSS 7.5 High

WordPress ZoloBlocks Plugin <= 2.3.2 - Local File Inclusion Vulnerability
- bdthemes ZoloBlocks
- File inclusion
Not analysed yet 20 Aug 2025