Vulnerabilidades em CozyThemes

24 resultados
Análise Vexday

CozyThemes apresenta um perfil de risco baixo com 10 vulnerabilidades registradas, nenhuma em exploração ativa e nenhuma com severidade crítica. A fraqueza dominante é falha de autorização (CWE-862), indicando problemas de controle de acesso que requerem atenção, mas o panorama não é agravado por atividade de ataque recente ou descobertas recentes.

CVE-2026-19948MEDIUMCozy Blocks <= 2.2.17 - Missing Authorization to Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' ParameterEPSS 0.7%CVE-2024-43974MEDIUMWordPress ReviveNews theme <= 1.0.2 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2024-43980MEDIUMWordPress FotaWP theme <= 1.4.1 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2024-43979MEDIUMWordPress Blockbooster theme <= 1.0.10 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2024-43341MEDIUMWordPress Hello Agency theme <= 1.0.5 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2026-112832CRITICALWordPress Rootblox plugin <= 1.0.6 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2026-15333MEDIUMCozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cozyCustomFont' Block AttributeEPSS 0.4%CVE-2026-15334MEDIUMCozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block AttributeEPSS 0.4%CVE-2026-15393MEDIUMCozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postMeta.font.size' Block AttributeEPSS 0.4%CVE-2025-47485MEDIUMWordPress Cozy Blocks plugin <= 2.1.22 - Broken Access Control VulnerabilityEPSS 0.4%CVE-2025-30838MEDIUMWordPress Cozy Blocks plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2026-75019MEDIUMCozy Blocks <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via cozyHoverEffect Block AttributeEPSS 0.3%CVE-2026-15950MEDIUMCozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layoutCircle.alignment' Block AttributeEPSS 0.3%CVE-2024-50441MEDIUMWordPress Cozy Blocks plugin <= 2.0.15 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-50502MEDIUMWordPress Cozy Blocks plugin <= 2.0.18 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-47355MEDIUMWordPress Cozy Blocks plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-97070MEDIUMWordPress Cozy Blocks plugin <= 2.2.23 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2025-49375MEDIUMWordPress HomeLancer theme <= 1.0.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-109978MEDIUMCozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block AttributeEPSS 0.2%CVE-2025-58606MEDIUMWordPress SaasLauncher Theme <= 1.3.0 - Broken Access Control VulnerabilityEPSS 0.2%