PHP Remote File Inclusion Vulnerability in bdthemes ZoloBlocks Plugin
CVE-2025-53210

7.5HIGH

Key Information:

Vendor

WordPress
Status
Zoloblocks
Vendor
CVE Published:
20 August 2025

What is CVE-2025-53210?

The bdthemes ZoloBlocks plugin for WordPress is susceptible to a PHP Remote File Inclusion vulnerability. This flaw allows attackers to manipulate file paths, facilitating Local File Inclusion (LFI) attacks. Affected versions include ZoloBlocks before version 2.3.2. To secure your website, ensure that you are using the latest version of the plugin and follow best practices for WordPress security to mitigate potential exploits.

Affected Version(s)

ZoloBlocks <= 2.3.2

References

https://patchstack.com/database/wordpress/plugin/zolobloc...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

h0j3n (Patchstack Alliance)
JSON
.
CVE-2025-53210 : PHP Remote File Inclusion Vulnerability in bdthemes ZoloBlocks Plugin