5.3
Medium
CVE-2025-49903 Missing Authorization vulnerability in bdthemes ZoloBlocks zoloblocks allows Exploiting Incorrectly Configured Access…
Description
Missing Authorization vulnerability in bdthemes ZoloBlocks zoloblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ZoloBlocks: from n/a through <= 2.3.11.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ZoloBlocks 2.3 | earliest → 2.3.11 | No fix stated |
Other CVEs of ZoloBlocks
The 4 CVEs of ZoloBlocks →
CVE-2025-60161
Server-Side Request Forgery (SSRF) vulnerability in bdthemes ZoloBlocks zoloblocks allows Server Side Request…
5.4
Medium
CVE-2025-58230
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bdthemes…
6.5
Medium
CVE-2025-53210
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
7.5
High