CozyThemes vulnerabilities

CVEs per yearBy the year they were published

1. 20247
2. 20254
3. 202613

Newest CVEs

• CVE-2026-24533

  WordPress Cozy Blocks plugin <= 2.2.27 - Cross Site Scripting (XSS) vulnerability

  CozyThemes · Cozy Blocks

  Medium6.5
• CVE-2026-109975

  Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute

  cozythemes · Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox

  Medium6.4
• CVE-2026-109978

  Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block Attribute

  cozythemes · Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox

  Medium6.4
• CVE-2026-112832

  WordPress Rootblox plugin <= 1.0.6 - Local File Inclusion vulnerability

  CozyThemes · Rootblox

  Critical9.8
• CVE-2026-111843

  WordPress Rootblox plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability

  CozyThemes · Rootblox

  Medium6.5
• CVE-2026-97070

  WordPress Cozy Blocks plugin <= 2.2.23 - Insecure Direct Object References (IDOR) vulnerability

  CozyThemes · Cozy Blocks

  Medium6.9
• CVE-2026-19948

  Cozy Blocks <= 2.2.17 - Missing Authorization to Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' Parameter

  cozythemes · Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates

  Medium5.3
• CVE-2026-75019

  Cozy Blocks <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via cozyHoverEffect Block Attribute

  cozythemes · Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates

  Medium6.4
• CVE-2026-15950

  Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layoutCircle.alignment' Block Attribute

  cozythemes · Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates

  Medium6.4
• CVE-2026-15393

  Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postMeta.font.size' Block Attribute

  cozythemes · Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates

  Medium6.4