← Back

Cozythemes

cozythemes

6 CVEs • 5 products

Products (5)

Click to collapse
Toggle
Cozy Blocks
cozy_blocks
2 CVEs
Hello Agency
hello_agency
1 CVE
Revivenews
revivenews
1 CVE
Blockbooster
blockbooster
1 CVE
Fotawp
fotawp
1 CVE

CVEs (6)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-43980
1Cozythemes
1Fotawp
Jun 17, 2026
Nov 1, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Missing Authorization vulnerability in CozyThemes Fota WP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fota WP: from n/a through 1.4.1.
CVE-2024-43979
1Cozythemes
1Blockbooster
Jun 17, 2026
Nov 1, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Missing Authorization vulnerability in CozyThemes Blockbooster allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blockbooster: from n/a through 1.0.10.
CVE-2024-43974
1Cozythemes
1Revivenews
Jun 17, 2026
Nov 1, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Missing Authorization vulnerability in CozyThemes ReviveNews allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ReviveNews: from n/a through 1.0.2.
CVE-2024-43341
1Cozythemes
1Hello Agency
Jun 17, 2026
Nov 1, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Missing Authorization vulnerability in CozyThemes Hello Agency allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hello Agency: from n/a through 1.0.5.
CVE-2024-50441
1Cozythemes
1Cozy Blocks
Jun 17, 2026
Oct 28, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks cozy-addons allows Stored XSS.This issue affects Cozy Blocks: from n/a through <= 2.0.15.
CVE-2024-50502
1Cozythemes
1Cozy Blocks
Jun 17, 2026
Oct 28, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks cozy-addons allows DOM-Based XSS.This issue affects Cozy Blocks: from n/a through <= 2.0.18.