Plugin icon

ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns

zoloblocks

Vulnerabilities:

6

Last Updated:

March 17, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2025-11-04
Title
ZoloBlocks < 2.3.12 - Missing Authorization
Fixed in
Fixed in 2.3.12
CVSS
5.3 (medium)
Published
2025-10-23
Title
ZoloBlocks < 2.3.12 - Missing Authorization to Unauthenticated Popup Enable/Disable
Fixed in
Fixed in 2.3.12
CVSS
5.3 (medium)
Published
2025-09-30
Title
ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns < 2.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.3.11
CVSS
6.4 (medium)
Published
2025-09-26
Title
ZoloBlocks < 2.3.12 - Unauthenticated Sever-Side Request Forgery
Fixed in
Fixed in 2.3.12
CVSS
7.2 (high)
Published
2025-09-22
Title
ZoloBlocks < 2.3.13 - Contributor+ Stored XSS
Fixed in
Fixed in 2.3.13
CVSS
5.9 (medium)
Published
2025-08-07
Title
ZoloBlocks < 2.3.3 - Authenticated (Subscriber+) Local File Inclusion
Fixed in
Fixed in 2.3.3
CVSS
7.5 (high)