The vulnerability CVE-2025-53210 affects bdthemes ZoloBlocks versions up to 2.3.2 and is characterized by improper control of filenames used in PHP include or require statements. This flaw allows PHP Local File Inclusion, which can lead to unauthorized access or execution of local files within the application context. The CVSS 3.1 score is 7.5, indicating a high severity with network attack vector, high attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or vendor advisory is currently provided, and no known exploits are reported.

Successful exploitation of this vulnerability could allow an attacker with low privileges to include local files on the server, potentially leading to disclosure of sensitive information, modification of application behavior, or denial of service. The impact is rated high due to the combined effects on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor bdthemes communications for updates. No specific mitigations are provided in the available data.