Zoloblocks
Approved changes feed: RSS · Atom
cpe:2.3:a:bdthemes:zoloblocks:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bdthemes (5429b37a-0acd-5ad1-805d-fa178e11cdda) |
|---|---|
| Product | Zoloblocks (4ea3c65a-5319-57c0-9c1f-44a2ad54cb8f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-60161 |
vulnerable | 2026-06-03 15:07:55.810206 |
WordPress ZoloBlocks Plugin <= 2.3.11 - Server Side Request Forgery (SSRF) Vulnerability
MEDIUM (5.4)
Server-Side Request Forgery (SSRF) vulnerability in bdthemes ZoloBlocks zoloblocks allows Server Side Request Forgery.This issue affects ZoloBlocks: from n/a through <= 2.3.11.
Published: 2025-09-26T08:31:59.493Z
Updated: 2026-04-28T16:13:56.338Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58230 |
vulnerable | 2026-06-03 15:06:20.968900 |
WordPress ZoloBlocks plugin <= 2.3.12 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bdthemes ZoloBlocks zoloblocks allows DOM-Based XSS.This issue affects ZoloBlocks: from n/a through <= 2.3.12.
Published: 2025-09-22T18:23:42.627Z
Updated: 2026-05-13T00:27:07.052Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53210 |
vulnerable | 2026-06-03 15:03:53.646031 |
WordPress ZoloBlocks Plugin <= 2.3.2 - Local File Inclusion Vulnerability
HIGH (7.5)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in bdthemes ZoloBlocks zoloblocks allows PHP Local File Inclusion.This issue affects ZoloBlocks: from n/a through <= 2.3.2.
Published: 2025-08-20T08:03:18.255Z
Updated: 2026-05-12T00:34:09.418Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49903 |
vulnerable | 2026-06-03 15:01:46.294355 |
WordPress ZoloBlocks plugin <= 2.3.11 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in bdthemes ZoloBlocks zoloblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ZoloBlocks: from n/a through <= 2.3.11.
Published: 2025-10-22T14:32:10.215Z
Updated: 2026-04-28T16:13:07.504Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.