Cross-site Scripting Vulnerability in ZoloBlocks Plugin by bdthemes

CVE-2025-58230

What is CVE-2025-58230?

The ZoloBlocks plugin by bdthemes contains a vulnerability that allows for improper neutralization of user input during web page generation, leading to a DOM-based cross-site scripting (XSS) risk. This vulnerability affects ZoloBlocks versions ranging from n/a up to 2.3.9, which may allow malicious actors to inject arbitrary scripts that could compromise the integrity of user data or lead to other attacks. It is essential for users of affected versions to implement security measures to mitigate these risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References