WordPress Cozy Blocks Authenticated Stored XSS via postMeta.font size Attribute (CVE-2026-15393)

www.wordfence.com 2026-07-29查看中文 →

Security AdvisoryCVE-2026-15393MediumCozy Blocks

Affected:

Cozy Blocks <= 2.2.11

Fixed in:

2.2.12

Referenced CVEs: CVE-2026-15393 · 6.4

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

WordPress MailChimp Forms by MailMunch Missing Authorization Leading to Account Takeover CVE-2026-7520 2026-08-06 Java Xerces Base64 Decode DoS/RCE Vulnerability and POC 2026-08-06 CVE-2026-11977: WP Post Author <= 3.9.1 Authenticated SQL Injection 2026-08-06 WordPress Independent Analytics Unauth Stored XSS Vulnerability (CVE-2026-17506) 2026-08-06 Java Base64 DoS Vulnerability via ArrayIndexOutOfBoundsException with POC 2026-08-06

Offline Archive

Offline screenshot & PDF are Pro-exclusive