cozythemes
Web & CMS Pluginscommercial
Latest CVEs
The 15 most recently published vulnerabilities affecting cozythemes.
- CVE-2026-15950Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layoutCircle.alignment' Block Attribute6.4
- CVE-2026-15393Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postMeta.font.size' Block Attribute6.4
- CVE-2026-15334Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute6.4
- CVE-2026-15333Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cozyCustomFont' Block Attribute6.4
- CVE-2025-49375WordPress HomeLancer theme <= 1.0.1 - Broken Access Control vulnerability5.4
- CVE-2025-59573WordPress Cozy Blocks Plugin <= 2.1.29 - Content Injection Vulnerability5.3
- CVE-2025-58606WordPress SaasLauncher Theme <= 1.3.0 - Broken Access Control Vulnerability5.0
- CVE-2025-47485WordPress Cozy Blocks plugin <= 2.1.22 - Broken Access Control Vulnerability5.3
- CVE-2025-30838WordPress Cozy Blocks plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2024-43341WordPress Hello Agency theme <= 1.0.5 - Broken Access Control vulnerability6.5
- CVE-2024-43974WordPress ReviveNews theme <= 1.0.2 - Broken Access Control vulnerability6.5
- CVE-2024-43979WordPress Blockbooster theme <= 1.0.10 - Broken Access Control vulnerability6.5
- CVE-2024-43980WordPress FotaWP theme <= 1.4.1 - Broken Access Control vulnerability6.5
- CVE-2024-50441WordPress Cozy Blocks plugin <= 2.0.15 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2024-50502WordPress Cozy Blocks plugin <= 2.0.18 - Cross Site Scripting (XSS) vulnerability6.5