CVE Intelligence

CozyThemes Cozy Blocks vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting CozyThemes Cozy Blocks: 2 record(s), with affected versions and fixes.

CVE-2026-97070 Medium · 6.9 CWE-639 Oct 5, 2026
WordPress Cozy Blocks plugin <= 2.2.23 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cozy Blocks: from n/a through 2.2.23.
CVE-2025-59573 Medium · 5.3 CWE-80 Sep 22, 2025
WordPress Cozy Blocks Plugin <= 2.1.29 - Content Injection Vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in CozyThemes Cozy Blocks cozy-addons allows Code Injection.This issue affects Cozy Blocks: from n/a through <= 2.1.29.