Vulnerabilidades em CozyThemes
18 resultadosAnálise Vexday
CozyThemes apresenta um perfil de risco baixo com 10 vulnerabilidades registradas, nenhuma em exploração ativa e nenhuma com severidade crítica. A fraqueza dominante é falha de autorização (CWE-862), indicando problemas de controle de acesso que requerem atenção, mas o panorama não é agravado por atividade de ataque recente ou descobertas recentes.
CVE-2024-43974MEDIUMWordPress ReviveNews theme <= 1.0.2 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2024-43980MEDIUMWordPress FotaWP theme <= 1.4.1 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2024-43979MEDIUMWordPress Blockbooster theme <= 1.0.10 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2024-43341MEDIUMWordPress Hello Agency theme <= 1.0.5 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2026-19948MEDIUMCozy Blocks <= 2.2.17 - Missing Authorization to Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' ParameterEPSS 0.4%CVE-2025-30838MEDIUMWordPress Cozy Blocks plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-47485MEDIUMWordPress Cozy Blocks plugin <= 2.1.22 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2024-50441MEDIUMWordPress Cozy Blocks plugin <= 2.0.15 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-47355MEDIUMWordPress Cozy Blocks plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-49375MEDIUMWordPress HomeLancer theme <= 1.0.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-50502MEDIUMWordPress Cozy Blocks plugin <= 2.0.18 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-15333MEDIUMCozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cozyCustomFont' Block AttributeEPSS 0.2%CVE-2026-15393MEDIUMCozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postMeta.font.size' Block AttributeEPSS 0.2%CVE-2026-15334MEDIUMCozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block AttributeEPSS 0.2%CVE-2025-59573MEDIUMWordPress Cozy Blocks Plugin <= 2.1.29 - Content Injection VulnerabilityEPSS 0.2%CVE-2025-58606MEDIUMWordPress SaasLauncher Theme <= 1.3.0 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2026-75019MEDIUMCozy Blocks <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via cozyHoverEffect Block AttributeEPSS 0.2%CVE-2026-15950MEDIUMCozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layoutCircle.alignment' Block AttributeEPSS 0.2%