PT-2025-39603 · Bdthemes · Zoloblocks

Published 2025-09-26 · Updated 2025-10-09 · CVE-2025-60161

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions bdthemes ZoloBlocks versions through 2.3.9

Description A Server-Side Request Forgery (SSRF) issue exists in bdthemes ZoloBlocks. This allows for Server Side Request Forgery. The issue impacts the software when using versions through 2.3.9.

Recommendations Update bdthemes ZoloBlocks to a version later than 2.3.9.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2025-60161

Affected Products

Zoloblocks

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-60161 · Security Note
• https://t.me/cveNotify/137987 · Telegram Post
• https://patchstack.com/database/Wordpress/Plugin/zoloblocks/vulnerability/wordpress-zoloblocks-plugin-2-3-9-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/1971624791992938858 · Twitter Post
• https://twitter.com/CVEnew/status/1971499183367676161 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/zoloblocks/vulnerability/wordpress-zoloblocks-plugin-2-3-9-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Note