Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates vulnerabilities

Product

Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates

by cozythemes · last CVE Sep 1, 2026

CVEs

On KEV

6.4

Max CVSS

New 30D

Vulnerabilities3 In the news0 Timeline

Severity mix

Critical 0High 0Medium 3Low 0

Severity

All severities3 Critical0 High0 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-75019	6.4	0%	Aug 25	Cozy Blocks <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via cozyHoverEffect Block Attribute Affected: through 2.2.16
CVE-2026-15950	6.4	0%	Aug 1	Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layoutCircle.alignment' Block Attribute Affected: through 2.2.11
CVE-2026-19948	5.3	1%	Sep 1	Cozy Blocks <= 2.2.17 - Missing Authorization to Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' Parameter Affected: through 2.2.17