Skip to contentCozythemes Cozy Blocks vulnerabilities
- cozythemes cozy blocksWordPress Cozy Blocks plugin <= 2.2.27 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-245336.5 Medium
- cozythemes cozy blocks – website builder & business growth toolkit | popups, lead forms & inboxCozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block AttributeCVE-2026-1099756.4 Medium
- cozythemes cozy blocks – website builder & business growth toolkit | popups, lead forms & inboxCozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block AttributeCVE-2026-1099786.4 Medium
- cozythemes cozy blocksWordPress Cozy Blocks plugin <= 2.2.23 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2026-970706.9 Medium
- cozythemes cozy blocks – page builder for gutenberg editor & fse with 700+ patterns, 58 blocks & templatesCozy Blocks <= 2.2.17 - Missing Authorization to Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' ParameterCVE-2026-199485.3 Medium
- cozythemes cozy blocks – page builder for gutenberg editor & fse with 700+ patterns, 58 blocks & templatesCozy Blocks <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via cozyHoverEffect Block AttributeCVE-2026-750196.4 Medium
- cozythemes cozy blocks – page builder for gutenberg editor & fse with 700+ patterns, 58 blocks & templatesCozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layoutCircle.alignment' Block AttributeCVE-2026-159506.4 Medium
- cozythemes cozy blocks – page builder for gutenberg editor & fse with 600+ patterns, 58 blocks & templatesCozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postMeta.font.size' Block AttributeCVE-2026-153936.4 Medium
- cozythemes cozy blocks – page builder for gutenberg editor & fse with 600+ patterns, 58 blocks & templatesCozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block AttributeCVE-2026-153346.4 Medium
- cozythemes cozy blocks – page builder for gutenberg editor & fse with 600+ patterns, 58 blocks & templatesCozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cozyCustomFont' Block AttributeCVE-2026-153336.4 Medium
- cozythemes cozy blocksWordPress Cozy Blocks Plugin <= 2.1.29 - Content Injection VulnerabilityCVE-2025-595735.3 Medium
- cozythemes cozy blocksWordPress Cozy Blocks plugin <= 2.1.22 - Broken Access Control VulnerabilityCVE-2025-474855.3 Medium
- cozythemes cozy blocksWordPress Cozy Blocks plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-308386.5 Medium
- cozythemes cozy blocksWordPress Cozy Blocks plugin <= 2.0.15 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-504416.5 Medium
- cozythemes cozy blocksWordPress Cozy Blocks plugin <= 2.0.18 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-505026.5 Medium
- cozythemes cozy blocksWordPress Cozy Blocks plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-473556.5 Medium