All 3 CVE vulnerabilities found in Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates, with AI-generated Chinese analysis, references, and POCs.
Vendor: cozythemes
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-19948 | Cozy Blocks <= 2.2.17 - Missing Authorization to Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' Parameter CWE-862 | 5.3 | Medium | 2026-09-01 |
| CVE-2026-75019 | Cozy Blocks <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via cozyHoverEffect Block Attribute CWE-79 | 6.4 | Medium | 2026-08-25 |
| CVE-2026-15950 | Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layoutCircle.alignment' Block Attribute CWE-79 | 6.4 | Medium | 2026-08-01 |
All 3 known CVE vulnerabilities affecting Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates with full Chinese analysis, references, and POCs where available.