CozyThemes

Records24All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

CozyThemes records in CISA KEV

No CozyThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cozy Blocks 2 records LOW Blockbooster 1 record MEDIUM Fotawp 1 record MEDIUM Hello Agency 1 record MEDIUM Revivenews 1 record MEDIUM

Records

1 record in Fotawp · all components

TI-2024-29569 CVE-2024-43980 · GHSA-7g6p-c3g9-82pv

WordPress FotaWP theme <= 1.4.1 - Broken Access Control vulnerability

MEDIUM 49

Missing Authorization vulnerability in CozyThemes Fota WP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fota WP: from n/a through 1.4.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00515 Published 2024-11-01 No fix listed CWE-862

Open these records in search →

Critical	5
High	0
Medium	19
Low	0
No CVSS	0