CO
Vendor
CozyThemes
25
CVEs
0
On KEV
6
New 30D
Products
RO9.8
Rootblox
CozyThemes
2 CVEs0 on KEV2 new
CB6.9
Cozy Blocks
CozyThemes
8 CVEs0 on KEV2 new
CB6.4
Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox
cozythemes
2 CVEs0 on KEV2 new
CB6.4
Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates
cozythemes
3 CVEs0 on KEV0 new
CB6.4
Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates
cozythemes
3 CVEs0 on KEV0 new
BL9.8
Blockbooster
CozyThemes
1 CVEs0 on KEV0 new
FW9.8
Fota WP
CozyThemes
1 CVEs0 on KEV0 new
FO9.8
Fotawp
Cozythemes
1 CVEs0 on KEV0 new
HA9.8
Hello Agency
CozyThemes
1 CVEs0 on KEV0 new
HO5.4
HomeLancer
cozythemes
1 CVEs0 on KEV0 new
RE9.8
ReviveNews
CozyThemes
1 CVEs0 on KEV0 new
SA5.0
SaasLauncher
cozythemes
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-24533 New | CB Cozy Blocks CozyThemes | 6.5 | Oct 29 | WordPress Cozy Blocks plugin <= 2.2.27 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-109975 New | CB Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox cozythemes | 6.4 | Oct 28 | Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute |
| CVE-2026-109978 New | CB Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox cozythemes | 6.4 | Oct 28 | Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block Attribute |
| CVE-2026-112832 | RO Rootblox CozyThemes | 9.8 | Oct 22 | WordPress Rootblox plugin <= 1.0.6 - Local File Inclusion vulnerability |
| CVE-2026-111843 | RO Rootblox CozyThemes | 6.5 | Oct 20 | WordPress Rootblox plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-97070 | CB Cozy Blocks CozyThemes | 6.9 | Oct 5 | WordPress Cozy Blocks plugin <= 2.2.23 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-19948 | CB Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates cozythemes | 5.3 | Sep 1 | Cozy Blocks <= 2.2.17 - Missing Authorization to Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' Parameter |
| CVE-2026-75019 | CB Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates cozythemes | 6.4 | Aug 25 | Cozy Blocks <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via cozyHoverEffect Block Attribute |
| CVE-2026-15950 | CB Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates cozythemes | 6.4 | Aug 1 | Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layoutCircle.alignment' Block Attribute |
| CVE-2026-15393 | CB Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates cozythemes | 6.4 | Jul 28 | Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postMeta.font.size' Block Attribute |
| CVE-2026-15334 | CB Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates cozythemes | 6.4 | Jul 24 | Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute |
| CVE-2026-15333 | CB Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates cozythemes | 6.4 | Jul 24 | Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cozyCustomFont' Block Attribute |
| CVE-2025-49375 | HO HomeLancer cozythemes | 5.4 | Jan 22 | WordPress HomeLancer theme <= 1.0.1 - Broken Access Control vulnerability |
| CVE-2025-59573 | CB Cozy Blocks CozyThemes | 5.3 | Sep 22 | WordPress Cozy Blocks Plugin <= 2.1.29 - Content Injection Vulnerability |
| CVE-2025-58606 | SA SaasLauncher cozythemes | 5.0 | Sep 3 | WordPress SaasLauncher Theme <= 1.3.0 - Broken Access Control Vulnerability |
| CVE-2025-47485 | CB Cozy Blocks CozyThemes | 5.3 | May 7 | WordPress Cozy Blocks plugin <= 2.1.22 - Broken Access Control Vulnerability |
| CVE-2025-30838 | CB Cozy Blocks CozyThemes | 6.5 | Mar 27 | WordPress Cozy Blocks plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-43341 | HA Hello Agency CozyThemes | 9.8 | Nov 1 | WordPress Hello Agency theme <= 1.0.5 - Broken Access Control vulnerability |
| CVE-2024-43974 | RE ReviveNews CozyThemes | 9.8 | Nov 1 | WordPress ReviveNews theme <= 1.0.2 - Broken Access Control vulnerability |
| CVE-2024-43979 | BL Blockbooster CozyThemes | 9.8 | Nov 1 | WordPress Blockbooster theme <= 1.0.10 - Broken Access Control vulnerability |
| CVE-2024-43980 | FW Fota WP CozyThemes | 9.8 | Nov 1 | WordPress FotaWP theme <= 1.4.1 - Broken Access Control vulnerability |
| CVE-2024-50441 | CB Cozy Blocks CozyThemes | 5.4 | Oct 28 | WordPress Cozy Blocks plugin <= 2.0.15 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-50502 | CB Cozy Blocks CozyThemes | 5.4 | Oct 28 | WordPress Cozy Blocks plugin <= 2.0.18 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-47355 | CB Cozy Blocks CozyThemes | 6.5 | Oct 6 | WordPress Cozy Blocks plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerability |