Read the docs

CozyThemes

Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

CozyThemes records in CISA KEV

No CozyThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cozy Blocks 2 records LOW Blockbooster 1 record MEDIUM Fotawp 1 record MEDIUM Hello Agency 1 record MEDIUM Revivenews 1 record MEDIUM

Records

2 records in Cozy Blocks · all components

TI-2024-33874 CVE-2024-50441 · GHSA-f8wg-8fjj-qf3g

WordPress Cozy Blocks plugin <= 2.0.15 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks cozy-addons allows Stored XSS.This issue affects Cozy Blocks: from n/a through <= 2.0.15.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00295 Published 2024-10-28 No fix listed CWE-79
TI-2024-33932 CVE-2024-50502 · GHSA-9wxg-rrgr-p9x6

WordPress Cozy Blocks plugin <= 2.0.18 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks cozy-addons allows DOM-Based XSS.This issue affects Cozy Blocks: from n/a through <= 2.0.18.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-10-28 No fix listed CWE-79
Open these records in search →