ZoloBlocks WordPress Plugin Missing Authorization Vulnerability in Popup Management
Vulnerability
A vulnerability exists in the ZoloBlocks Gutenberg Block Editor Plugin for WordPress, specifically in versions through 2.3.11. The issue arises from a lack of proper capability checks in the update_popup_status() function, allowing unauthenticated attackers to unauthorizedly enable or disable popups.
Impact
Exploitation of this vulnerability could lead to unauthorized changes in popup settings, allowing attackers to manipulate the visibility and behavior of popups on the site.
Remediation
Users are advised to update the ZoloBlocks WordPress plugin to version 2.3.12 or later.
Added: Oct 24, 2025, 10:21 AM
Updated: Oct 24, 2025, 10:21 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
8.1remediation
7.7relevance
0.8threat
3.2urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.