CozyThemes vulnerabilities
24 published CVEs name CozyThemes among the affected products.
- 24Published CVEs24 of them scored
- 13Last 12 monthspublished in the last year
- 1Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-24533
WordPress Cozy Blocks plugin <= 2.2.27 - Cross Site Scripting (XSS) vulnerability
CozyThemes · Cozy Blocks
Medium6.5 - CVE-2026-109975
Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute
cozythemes · Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox
Medium6.4 - CVE-2026-109978
Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block Attribute
cozythemes · Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox
Medium6.4 - CVE-2026-112832
WordPress Rootblox plugin <= 1.0.6 - Local File Inclusion vulnerability
CozyThemes · Rootblox
Critical9.8 - CVE-2026-111843
WordPress Rootblox plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability
CozyThemes · Rootblox
Medium6.5 - CVE-2026-97070
WordPress Cozy Blocks plugin <= 2.2.23 - Insecure Direct Object References (IDOR) vulnerability
CozyThemes · Cozy Blocks
Medium6.9 - CVE-2026-19948
Cozy Blocks <= 2.2.17 - Missing Authorization to Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' Parameter
cozythemes · Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates
Medium5.3 - CVE-2026-75019
Cozy Blocks <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via cozyHoverEffect Block Attribute
cozythemes · Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates
Medium6.4 - CVE-2026-15950
Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layoutCircle.alignment' Block Attribute
cozythemes · Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates
Medium6.4 - CVE-2026-15393
Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postMeta.font.size' Block Attribute
cozythemes · Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates
Medium6.4