Cozy Blocks vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

CB

Product

Cozy Blocks

by CozyThemes · last CVE Oct 5, 2026

4

CVEs

0

On KEV

6.9

Max CVSS

1

New 30D

Vulnerabilities4 In the news0 Timeline

Severity mix

Critical 0High 0Medium 4Low 0

Severity

All severities4 Critical0 High0 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Cozy Blocks to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-97070	6.9	0%	Oct 5	WordPress Cozy Blocks plugin <= 2.2.23 - Insecure Direct Object References (IDOR) vulnerability Affected: through 2.2.23
CVE-2024-50441	5.4	0%	Oct 28	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks cozy-addons allows Stored XSS.This issue affects Cozy… Affected: before 2.0.16
CVE-2024-50502	5.4	0%	Oct 28	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks cozy-addons allows DOM-Based XSS.This issue affects… Affected: before 2.0.19
CVE-2025-59573	5.3	0%	Sep 22	WordPress Cozy Blocks Plugin <= 2.1.29 - Content Injection Vulnerability Affected: through 2.1.29