CVE-2026-124421: WordPress ZoloBlocks plugin <= 2.8.2 - Broken Access Control vulnerability

Q: Who can exploit this issue?

The vector is network-based and requires no privileges or user interaction, so an unauthenticated remote attacker may be able to exploit affected ZoloBlocks installations.

Q: Which versions are affected?

The issue affects ZoloBlocks versions through 2.8.2. The available information does not identify a fixed version.

Q: What is the potential impact?

The reported impact is limited to confidentiality, with no reported integrity or availability impact. The severity is medium, with a CVSS score of 5.3.

Published Nov 11, 2026

Updated

Missing Authorization vulnerability in BdThemes ZoloBlocks zoloblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ZoloBlocks: from n/a through 2.8.2.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress ZoloBlocks to a version that resolves this vulnerability.
Fixed in 2.8.4

Event History

Nov 11, 2026

CVE Published

via MITRE·12:01 PM

Data Sourced

via MITRE·12:01 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·12:19 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The vector is network-based and requires no privileges or user interaction, so an unauthenticated remote attacker may be able to exploit affected ZoloBlocks installations.

Which versions are affected?

The issue affects ZoloBlocks versions through 2.8.2. The available information does not identify a fixed version.

What is the potential impact?

The reported impact is limited to confidentiality, with no reported integrity or availability impact. The severity is medium, with a CVSS score of 5.3.

CVE-2026-124421: WordPress ZoloBlocks plugin <= 2.8.2 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

Which versions are affected?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which versions are affected?

What is the potential impact?