Skip to content

Cozythemes vulnerabilities

Products

Newest

cozythemes cozy blocks WordPress Cozy Blocks plugin <= 2.2.27 - Cross Site Scripting (XSS) vulnerability CVE-2026-24533 6.5 MediumOctober 29, 2026
cozythemes cozy blocks – website builder & business growth toolkit | popups, lead forms & inbox Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute CVE-2026-109975 6.4 MediumOctober 28, 2026
cozythemes cozy blocks – website builder & business growth toolkit | popups, lead forms & inbox Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block Attribute CVE-2026-109978 6.4 MediumOctober 28, 2026
cozythemes rootblox WordPress Rootblox plugin <= 1.0.6 - Local File Inclusion vulnerability CVE-2026-112832 9.8 CriticalOctober 22, 2026
cozythemes rootblox WordPress Rootblox plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-111843 6.5 MediumOctober 20, 2026
cozythemes cozy blocks WordPress Cozy Blocks plugin <= 2.2.23 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-97070 6.9 MediumOctober 5, 2026
cozythemes cozy blocks – page builder for gutenberg editor & fse with 700+ patterns, 58 blocks & templates Cozy Blocks <= 2.2.17 - Missing Authorization to Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' Parameter CVE-2026-19948 5.3 MediumSeptember 1, 2026
cozythemes cozy blocks – page builder for gutenberg editor & fse with 700+ patterns, 58 blocks & templates Cozy Blocks <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via cozyHoverEffect Block Attribute CVE-2026-75019 6.4 MediumAugust 25, 2026
cozythemes cozy blocks – page builder for gutenberg editor & fse with 700+ patterns, 58 blocks & templates Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layoutCircle.alignment' Block Attribute CVE-2026-15950 6.4 MediumAugust 1, 2026
cozythemes cozy blocks – page builder for gutenberg editor & fse with 600+ patterns, 58 blocks & templates Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postMeta.font.size' Block Attribute CVE-2026-15393 6.4 MediumJuly 28, 2026
cozythemes cozy blocks – page builder for gutenberg editor & fse with 600+ patterns, 58 blocks & templates Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute CVE-2026-15334 6.4 MediumJuly 24, 2026
cozythemes cozy blocks – page builder for gutenberg editor & fse with 600+ patterns, 58 blocks & templates Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cozyCustomFont' Block Attribute CVE-2026-15333 6.4 MediumJuly 24, 2026
cozythemes homelancer WordPress HomeLancer theme <= 1.0.1 - Broken Access Control vulnerability CVE-2025-49375 5.4 MediumJanuary 22, 2026
cozythemes cozy blocks WordPress Cozy Blocks Plugin <= 2.1.29 - Content Injection Vulnerability CVE-2025-59573 5.3 MediumSeptember 22, 2025
cozythemes saaslauncher WordPress SaasLauncher Theme <= 1.3.0 - Broken Access Control Vulnerability CVE-2025-58606 5.0 MediumSeptember 3, 2025
cozythemes cozy blocks WordPress Cozy Blocks plugin <= 2.1.22 - Broken Access Control Vulnerability CVE-2025-47485 5.3 MediumMay 7, 2025
cozythemes cozy blocks WordPress Cozy Blocks plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability CVE-2025-30838 6.5 MediumMarch 27, 2025
cozythemes hello agency WordPress Hello Agency theme <= 1.0.5 - Broken Access Control vulnerability CVE-2024-43341 6.5 MediumNovember 1, 2024
cozythemes revivenews WordPress ReviveNews theme <= 1.0.2 - Broken Access Control vulnerability CVE-2024-43974 6.5 MediumNovember 1, 2024
cozythemes fota wp, fotawp +1 more WordPress FotaWP theme <= 1.4.1 - Broken Access Control vulnerability CVE-2024-43980 6.5 MediumNovember 1, 2024
cozythemes blockbooster WordPress Blockbooster theme <= 1.0.10 - Broken Access Control vulnerability CVE-2024-43979 6.5 MediumNovember 1, 2024
cozythemes cozy blocks WordPress Cozy Blocks plugin <= 2.0.15 - Cross Site Scripting (XSS) vulnerability CVE-2024-50441 6.5 MediumOctober 28, 2024
cozythemes cozy blocks WordPress Cozy Blocks plugin <= 2.0.18 - Cross Site Scripting (XSS) vulnerability CVE-2024-50502 6.5 MediumOctober 28, 2024
cozythemes cozy blocks WordPress Cozy Blocks plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerability CVE-2024-47355 6.5 MediumOctober 6, 2024