Cozy Blocks – Page Builder for Gutenberg & Site Editor with Post Blocks, WooCommerce Blocks, Magazine Blocks & WordPress Gutenberg Blocks

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Vulnerabilities

  • Input validation vulnerability in Cozy Blocks – Page Builder for Gutenberg & Site Editor with Post Blocks, WooCommerce Blocks, Magazine Blocks & WordPress Gutenberg Blocks 2.1.6

    Fixed

    The Cozy Blocks plugin for WordPress has a security issue that allows hackers to inject harmful code into web pages. This can happen in versions up to 2.1.6 and can be done by those with at least con...

    Read More
  • Input validation vulnerability in Cozy Blocks – Page Builder for Gutenberg & Site Editor, Post Blocks, WooCommerce Blocks, Magazine Blocks, WordPress Gutenberg Blocks, Patterns and Templates Library 2.0.18

    Fixed

    The Cozy Blocks plugin for WordPress has a security issue that allows hackers to insert harmful web scripts into web pages. This can happen on versions 2.0.18 and below because the plugin does not pr...

    Read More
  • Input validation vulnerability in Cozy Blocks – Page Builder for Gutenberg & Site Editor, Post Blocks, WooCommerce Blocks, Magazine Blocks, WordPress Gutenberg Blocks, Patterns and Templates Library 2.0.15

    Fixed

    The Cozy Blocks plugin for WordPress has a security issue called Stored Cross-Site Scripting, which affects versions up to 2.0.15. This is because the plugin does not properly clean and protect user ...

    Read More
  • Input validation vulnerability in Cozy Blocks – Page Builder for Gutenberg & Site Editor, Post Blocks, WooCommerce Blocks, Magazine Blocks, WordPress Gutenberg Blocks, Patterns and Templates Library 2.0.11

    Fixed

    The Cozy Blocks plugin for WordPress has a security issue called Stored Cross-Site Scripting. This happens because the plugin doesn't properly clean up user input and output. This allows attackers wh...

    Read More
  • Input validation vulnerability in Freemius SDK 2.5.9 (1072 components affected)

    Fixed

    The Freemius SDK for WordPress is vulnerable to an attack known as Reflected Cross-Site Scripting. This attack is possible because of insufficient security measures in versions of the Freemius SDK up ...

    Read More